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FOREWORD 

The  Transport  Crashworthiness  Study  was  conducted  under  NASA  Contract  No.  NASl-16076 
funded  jointly  by  NASA  and  the  FAA.  Technical  Monitors  for  this  contract  were  L.  Vosteen  and 
R.G.  Thonison  of  the  Langley  Research  Center  and  C.A.  Caiafa  of  the  FAA  Technical  Center.' 
E.  Widmayer  was  Principal  Investigator,  assisted  by  O.B.  Brende  of  Airworthiness  Safety. 

D.L.  Parks  of  Crew  Systems  and  D.W.  Twigg  of  Boeing  Computer  Services  made  signiHcant 
contributions  to  section  5,  Current  State  cf  Crashworthiness  Technology,  and  contributed  all  of 
appendix  D.  Ray  E.  Horton  of  the  Advanced  Composites  Development  program  contributed  section 
4.4.  a  part  of  section  4.0,  titled.  Advanced  Materials.  K.  H.  Dickenson  was  the  Program  Manager. 
The  study  was  conducted  under  the  supervision  of  W.W.  Bingham,  head  of  Structures  Research 
Division  of  Structures  Technology. 
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COMMERCIAL  JET  TRANSPORT  CRASHWORTHINESS 
EDWARD  WIDMAYER,  JR.  AND  OTTO  B.  BRENDE 
Boeing  Commercial  Airplane  Company 

1.0  SUMMARY 

This  report  presents  the  results  of  a  study  to  identify  areas  of  research  and  approaches  that  may 
result  in  improved  occupant  survivability  and  crashworthinea  of  tiansport  aircraft.  Tnis  study  was 
jointly  sponsored  by  National  Aeronautics  and  Space  Agency  (NASA)  and  the  Federal  Avii  '-ion 
Administration  (FAA).  The  thrust  of  the  study  is  the  definition  »f  areas  of  structural  eras!  worthiness 
for  transport  aircraft  which  might  form  the  basis  for  a  NASA/FAA  Research  Program. 

NASA  and  the  FAA  are  planning  a  10-year  research  and  development  program  to  improve  the 
structural  impact  resistance  of  general  aviation  and  commercial  jet  transport  aircraft.  As  part  of  this 
program  parallel  studies  have  been  conducted  by  The  Lockheed  California  Company,  The  Douglas 
Aircraft  Compariy,  and  The  Boeing  Commercial  Airplane  Company  to  review  the  accident  experience 
of  commercial  transport  aircraft,  assess  the  accident  performance  of  structural  components  ana  the 
status  of  impact  resistance  technology,  and  recommend  areas  of  research  and  development  for  that 
10-year  plan.  This  report  gives  the  results  of  the  Boeing  study. 


2.0  INTRODUCTION 


The  scope  of  the  study  from  the  ccatractual  statement  of  work  is: 

“A  study  to  define  approaches  to  improve  the  crashworthiness  of  transport  aircraft  is  described  in 
this  statement  of  wora.  Aircraft  accident  data  and  current  aircraft  design  practices  will  be  used  to 
define  a  range  of  crash  conditions  that  might  form  the  basis  for  developing  crashworthiness  design 
technology.  In  addition,  analytical  and/or  experimental  techniques  requi*^  to  determine  the 
adequacy  of  crashworthy  design  features  will  be  defined  and  the  adequacy  of  exist  ing  methods  and 
techniques  will  be  evaluated.  While  meeting  the  specific  objectives  of  this  study,  consideration 
should  be  given  to  the  increasing  role  advanced  composite  materials  might  play  in  the  design  of 
future  transports. 

Resume  of  tasks:  . 

1 .  To  review  and  evaluate  transport  aircraft  accident  data  to  define  a  range  of  crash  situations  that 
may  form  the  basis  for  developing  improved  crashworthiness  design  technology. 

2.  Identify  structure  components  and  aircraft  systems  that  significantly  participate  in  or  influence 
the  crash  dynamic  behavior  of  an  aircraft  in  the  scenarios  defined  in  1. 

3.  To  define  areas  of  .'.seaich  and  approaches  for  improving  crashworthiness. 

4.  To  identify  test  techniques,  test  data,  analytical  methods,  etc.  needed  to  evaluate  the  crash 
dynamic  response  of  transport  aircraft.” 


BACKGROUND 


Safety  is  the  primary  consideration  in  the  design  and  operation  of  commercial  transport  aircraft. 
For  over  40  years  the  FAA  with  its  predecessor  the  Civil  Aeronautics  Administration  (CAA), 
NASA  and  its  predecessor  National  Advisory  Committee  for  Aeronautics  (NACA),  the  National 
Transportation  Safety  Board  (NTSB),  the  airlines,  unions,  the  manufacturer  and  other  foreign 
government  agencies  have  contributed  to  the  development  and  advancement  of  safety  in 
commercial  aviation.  Their  efforts  have  resulted  in  the  Federal  Aviation  Regulations  (FAR)  which 
define  the  minimum  standards  for  safelty.  Thew  regulations  are  continually  reviewed  to  ascertain 
the  adequacy  of  the  standards.  This  concern  is  reflected  in  the  safety  record  of  air  carriers  jet 
aircraft  operations  over  the  past  20  ye^.  Figure  2.1  shows  that  the  accident  rate  for  all  types  of 
accidents  has  declined  to  about  2.5  pei  million  departures. 

Boei 


The  continuing  concern  for  safety  at 
accidents  and  evaluating  the  crashwo: 
emphasis,  safety  related  design  changes 
accident  data,  are  continually  being  ev 
in-service  aircraft. 


ling  has  placed  an  emphasis  on  determining  the  cause  of 
ijthiness  of  aircraft  structure  and  systems.  Because  of  this 
and  improvements,  based  on  operational  experience  and 
kluated  and  often  incorporated  in  new  design  aircraft  and 


However,  the  initial  condiuons  of  an 
complex  phenor'ena  and  it  is  difflcultj 
specific  design  or  to  compare  one 
environment  is  known  only  in  general 


Current  technology  is  ba^  on  the  best] 
complete  aircraft  crash  tests,  seat/occik{ 


Occident  and  the  subsequent  responses  of  the  aircraft  are 
to  quantify  the  level  of  structural  crashworthiness  cf  a 
diesign  to  another.  For  design  improvements,  the  crash 
terms. 


available  luiowledge  obtained  from  accident  surveys,  some 
ipant  tests,  and  from  military  and  automotive  programs 


aimed  at  specific  problems.  Each  manufacturer  of  aircraft  has  developed  empirical  engineering 
practices  that  treat  structural  crashworthiness.  These  practices  while  producing  good  products, 
are  extremely  limited  in  application. 

Some  analytical  tools  have  been  developed  for  modeling  the  nonlinear  response  of  occupants  in 
seats  and  of  aircraft  structures.  These  tx>is  have  conftraints  due  to  lack  of  computing  power  and 
have  had  limited  validation  and  application.  This  in  turn  has  limited  the  development  of  technical 
approaches  to  crash  modeling  and  simulation.  Further,  it  is  not  established  that  these  tools  include 
all  the  technology  necessary  to  adequately  treat  the  complete  structural  crashworthiness  problem. 

With  regard  to  facilities  and  methods  for  testing  for  crashworthiness,  some  facilities  are  currently 
available  or  under  development.  Some  test  methods  hsve  been  developed  by  the  FAA,  NASA,  and 
the  U.S.  Army  for  aeats,  components,  and  general  aviation  aircraft  and  helicopters.  Full-scale 
aircraft  crash  test  methods  are  being  extended  by  the  FAA  and  NASA. 

The  Boeing  study  under  this  contract  is  limited  to  commerdai  jet  transport  aircraff.  This  is  the  area  of 
Boeing  Commercial  Airplane  Company  expertise  and  amforms  to  the  company  product  line.  It  also 
reflects  the  structure  of  the  world  fleet  The  world  transport  fleet  as  of  1980 consisted  of  75.7%  jet 
aircraft  1.5.7%turfaopr)paircraft  8%  piston  engined  aircraft  and  0.5%  helicopters.  Aircraft  on  order  are 
divided  9  to  1  towards  jet  aircraft.  This  implies  that  the  percentage  of  jet  aircraft  in  the  fleet  will 
increase  during  the  time  frame  of  the  potential  NASA/FAA  research  program. 

While  the  reconunendstions  for  research  arising  in  this  study  are  directed  towards  technology  for 
commerdsl  jet  transports  there  is  an  applicability  to  the  general  and  private  aviation  sectors  as  well. 
Development  of  analytical  methods,  test  techniques  and  facilities  also,  have  applicability  to  military 
aircraft  and  the  automotive  industry. 

REPORT  ORGANIZATION 

The  main  sections  of  the  report  are  Accident  Data  Review  and  Scenario  Identification,  Role  of 
Structural  Components  in  Crashworthiness,  Current  State  of  Crashworthiness  Technology,  and 
Conclusions  and  Recommendations.  Accident  Data  Review  and  Scenario  Identification  discuss 
sources  and  selection  of  acddenta,  various  categories  of  the  data,  accident  scenario  development, 
and  ranges'  of  impact  conditions  for  the  scenarios.  The  Role  of  Structural  Components  in 
Cfashworthineas  treats  the  participation  of  structural  components,  accident  severity  and 
survivability,  interaction  of  components,  probiem  areas  for  advanced  materials  in  structural 
components.  The  Current  Stst*.  of  Crashworthiness  Technology  considers  the  U  S.  Artny's  Aircraft 
Crash  Survival  Design  Guide,  occupant  modeling  and  human  impact  tolerance,  structural  modeling 
and  test  technology,  assesses  the  technology  and  discusses  research  to  improve  the  technology. 
Conclusions  and  Recommendations  presents  aress  for  research  and  development  to  be  included  in 
the  NASA/FAA  10-yesr  General  Aviation  and  Commerdsl  Transport  Aircraft  Crashworthiness. 


3.0  ACCIDENT  DATA  REVIEW  AND  SCENARIO  IDENTIFICATION 


A  review  and  evaluation  of  accident  data  haa  been  made  for  the  years  1959—1979  which  cover  the 
commercial  jet  tranapcrt  worldwide  operations  for  aircraft  certified  under  Federal  Aviation 
Regulations  (FAR),  Part  25.  The  total  accident  base  has  been  reviewed,  and  potentially  survivable 
accidents  have  been  selected  for  farther  analysis. 

These  accidents  have  been  categorized  with  respect  to  airplane  size,  connguration,  crash 
environment,  operational  condition,  cause  of  accident,  injuries,  structural  damage,  and  fire 
hazard.  These  categories  are  discussed  and  the  level  of  engineering  data  in  accident  reports  is 
assessed. 

Three  basic  crash  scenarios  have  been  developed  from  the  sequence  of  events  observed  in  the 
accidents.  These  scenarios  have  been  divided  further  into  subsets  to  account  for  variations  between 
accidents  within  a  scenario.  The  range  of  initial  conditions  for  each  subset  haa  been  established. 
These  scenarios  may  serve  as  a  starting  point  for  research  on  crashworthiness,  but  require  further 
refinement  to  reflect  current  accident  experience: 

BOEING  ACCIDENT  FILE  AND  STUDY  DATA  BASE 

The  Boeing  file  of  aircraft  accidents  and  incidents  is  limited  to  all  known  commercial  jet  aircraft 
occurrences  involving  worldwide  aircarrier  operation  since  1959.  For  research,  study,  and  analysis 
purposes,  a  selected  group  of  these  accidents  form  a  ‘statistical  data  bank”  of  583  occurrences  that 
include  all  operations  from  1959  through  1979.  Excluded  from  this'  statistical  data  bank  are 
occurrences  that  involve  factors  beyond  the  control  of  u.e  airframe  manufacturer  such  as 
sabotage,  miliUiry  action,  military  operations,  turbulence  injury,  and  evacuation  injury  (unless 
caused  by  a  ha.'dware  deficiency). 

Accident  data  have  been  obtained  from  various  sources.  PAAfCAB  reporta  and  NTSB  reports  of 
U.S.  aircarrier  accidents,  have  been  used  extensively.  While  the  early  reports  (circa  I960) 
contained,  for  the  most  part,  sparse  details  on  structural  factors  and  on  the  cause  of 
injury/fatalities,  the  later  reports  are  much  more  complete.  Human  Factors  Factual  Reports 
prepared  by  the  NTSB  are  particularly  useful  with  respect  to  the  sequence  of  events,  cause  of 
injury/fatalities,  performance  of  cabin  interior  equipment  and  egress  factors.  Containing 
somewhat  less  data  are  the  International  Civil  Aviation  Organization  of  the  United  Nations 
(ICAO)  released  accident  reports  of  both  U.S.  and  foreign  aircarrier  occurrences.  Other  sources  of 
accident  information  include  the  British  Air  Registration  Board.  Airline  Pilots  Association,  and 
airline  reports,  official  accident  reports  released  by  foreign  governments,  periodicals  and 
newspaper  accounts,  and  the  Boeing  Company  files.  The  Boeing  data  base  is  summarized  in 
figure  3.1. 

The  relationship  between  fatalities  and  hull  loss  is  shown  in  ifigure  3.2.  Here  it  may  be  seen  that  of 
the  275  hull  loaaes,  206  involved  fatalities  and  the  three  fatal  injury  accidents  involved  substantial 
damage  to  the  aircraft. 

The  percentage  of  accidents  by  operational  phase  and  by  operational  time  is  shown  in  figure  3.3. 
Considering  those  operational  phases  taking  place  near  or  on  the  ground,  79.3%  of  the  accidents 
occur  in  18%  of  the  operational  time.  Further,  those  accidents  that  occur  during  climb,  cruise,  and 
descent  are  generally  nonaurvivable  and  outside  the  range  of  this  study. 


583  total  accidents*  ot  all  types 


147 

40 

28 

42 
72 

168 

43 
43 


involved  U  S.  carrier  domestic  operations 
involved  U  S.  carrier  international  operations 
involved  U  S.  carrier  tf.st  and  training  operations 
involved  U  S.  carrier  non-sctieduled  and  cargo  operations 
involved  foreign  carrier  domestic  operations 
involved  foreign  carrier  international  operations 
involveo  foreign  carrier  test  arKf  training  operations 
involved  foreign  carrier  non-scheduled  and  cargo  operations 


Of  these  operational  accidents 


275  resulted  in  hull  loss 

214  involved  fatalities  of  passengers  and/or  crew 
on  txjard  the  commercial  jet  aircraft. 


’Excludes:  Note:  excludes  33  non-operational  hull  losses 

Turbulence  (injury)  and  15  sabotage  or  military  action  hull  losses. 

Emergency  evacuation  (injury) 

Sabotage 

Military,  action/military  operations 


Figure  3. 1~Acciderts  During.  Twenty  Years  of  Jet  Operations 


Figure  3.2-Relatlonship  Between  Fatalities  and  Hull  Loss 


All  types  of  accidents*  -  world  wide  jet  fleet  1959-1979 


Exposure  -  percent  of  operational  time  14% 


STUDY  DATA  BASE 


A  study  data  base  was  formed  from  the  accident  data  base.  At  least  one  of  the  following  criteria  must 
exist  for  consideration  in  the  study: 

1.  Airframe  survivable  volume  maintained  (prior  to  severe  Hre) 

2.  At  least  one  occupant  did  not  die  from  trauma 

3.  Potential  for  egress  present 

4.  Accident  demonstrates  structural  or  system  perfonnance 

It  should  be  noted  that  criterion  (2)  is  significantly  more  severe  than  the  FAR  criterion  (see  app.  D, 
fig.  3.5)  or  NTSB  definitions  (see  app.  A)  of  a  survivable  accident.  Criterion  (2)  does  nut  mean  that  if 
one  survives  all  should  survive,  rather  that  one  occupant  was  able  to  withstand  this  accident 
environment  in  his  immediate  vicinity.  This  permits  accidents  to  be  considered  for  research  deftnition 
and  direction  that  are  beyond  the  scope  of  current  design  criteria. 

Using  the  above  criteria,  about  400  accident”  were  selected  from  the  total  data  base  of  583.  These 
400  were  then  subject  to  an  innlepth  review  and  many  were  eliminated  from  further  consideration 
because  no  injury  occurred  and/or  the  aircraft  was  structurally  crashwortliy  to  that  level  of  crash 
environment.  Other  accidents  were  eliminated  because  the  injury  was  due  to  human  behavior  rather 
than  other  factors.  Following  this  preliminary  review  a  list  of  approximately  200  "candidate 
accidents”  was  sel  acted  for  detailed  review.  These  accidents  were  deemed  to  have  the  potential  for 
a  reduction  in  injuries/fatalities  if  some  increase  in  crashworthiness  were  provided,  or  that 
demonstrated  signiHcant  crash  performance  of  the  structure.  For  these  200  accidents,  data  forms 
(see  app.  B)  were  completed  to  the  extent  of  the  available  data. 

Detailed  reviews  of  those  200  cases  resulted  in  additional  eliminations  and  a  final  list  of  153 
accidents  for  this  study  (see  fig.  2.1).  These  accidents  are  designated  as  "potentially  survivable”. 
throughout  the  report.  The  selected  list  was  checked  against  the  injury  and  hull  loss  lists  of  the 
Boeing  data  base  to  ensure  completeness.  Appendix  C  gives  a  list  of  accidents  for  1980  for  future 
consideration. 

It  should  be  noted  that  tlie  inclusion  of  the  less  severe  accidents  might  alter  any  statistics  derived 
from  the  data  base.  Consequently,  care  is  required  in  comparing  the  results  of  this  study  to  studies 
using  other  data  bases.  However,  comparisons  to  other  studies  indicate  that  all  of  the  known  severe 
potentially  survivable  accidents  involving  commercial  jet  transports  have  been  included  in  the  study 
database. 

The  data  base  does  not  represent  the  complete  distribution  of  possible  accidents  in  the  statistical 
sense.  There  are  probably  types  of  accidents  that  might  happen  in  the  future  thst  are  not 
represented.  The  accident  data  base  does  not  represent  a  stationary  random  process.  Certain  types 
of  accidents  that  occiured  during  the  jet  introduction  period  are  not  seen  in  the  mature  stage,  lliia 
could  have  an  important  impact  on  the  selection  of  scenarios  for  future  design  consideration. 
Evidence  of  this  maturity  is  seen  in  figure  2.1  by  the  marked  decrease  in  the  accident  rate  with  time. 
Further,  care  must  be  exercised  in  predictions  of  future  occurrences  from  the  past. 

A  summary  of  the  selected  study  dais  base  is  presented  in  table  3.1.  As  may  be  seen,  87%  of  the 
cases  involve  hull  loss  and  78%  of  the  cases  involve  fatalities  or  serious  injury,  while  fire  occurred 
in  67%  of  the  cases.  Fatalities  due  to  Hre  were  present  in  37%  of  the  cases,  fatalities  due  to  trauma 


Table  3. 1  -Data  Base  Summary 


Cases 

% 

Total  accidents 

153 

100.0 

Foreign 

31 

59.5 

U.S.  and  possessions 

62 

40.5 

Hull  loss 

133 

87 

Fatalities  or  serious  injury 

119 

73 

Fire 

103 

67 

Fire  caused  fatalities 

57 

37 

Trauma  caused  fatalities 

55 

36 

6.5 


Drowning 

Special 


10 


2.6 


were  present  in  36%  of  the  cases,  and  fatalities  due  to  drownhig  were  present  in  6%  of  the  cases. 
The  selected  cases  clearly  represent  serious  accidents. 

The  707  accident  in  Tahiti,  in  which  there  was  one  survivor,  has  not  been  included  in  the  data  base 
because  the  aircraft  was  not  recovered  and  the  survivor  could  not  supply  any  details  as  to  what 
happened.  Four  special  cases  are  included  in  the  data  base.  The  first  special  case  is  the  707  in 
London  in  1968  where  the  aircraft  caught  Hre  on  takeoff  and  made  a  successful  landing  but  five 
deaths  occurred  during  evacuation  due  to  fire.  The  second  special  case  is  the  DC-8  at  Toronto  in 
1970  where  the  aircraft  was.  damaged  during  an  attempted  landing  and  exploded  during  the 
subsequent  attempted  go-around  killing  the  108  occupants.  The  third  spedel  case  is  the  DC-9  in 
Boston  in  1973  where  the  aircraft  struck  a  seawall,  broke  up  and  burned,  but  one  passenger  walked 
out  of  the  fire  but  died  within  24  hours.  The  fourth  special  case  is  the  737  Madras  accident  on  April 
26,  1979,  in  which  the  detonation  of  an  explosive  device  in  the  forward  lavatory  led  to  landing 
conditions  that  resulted  in  an  overrun. 

The  study  data  base  is  presented  in  table  3.2.  Accidents  are  listed  by  date  (month,  day,  year), 
aircraft  type,  and  location  of  the  accident.  Hull  loss  is  indicated  oy  x  with  a  blank  indicating  substantial 
dama  e.  N umber  of  occupants,  fatalities,  and  serious  injuric )  are  also  shown.  Flight  phase  (takeoff, 
iiiitia.  climb,  approach,  landing,  taxi)  and  the  presence  of  Are  are  indicated. 

Accidents  have  been  assessed  as  impact  survivable  (YES)  if  no  deaths  were  attributed  to  trauma. 
Accidents  have  been  assessed  as  partially  impact  survivable  (PAR)  if  some  deaths  were  attributed  to 
trauma  but  there  were  some  deaths  attributed  directly  to  fire  related  causes  or  there  were  survivors. 
Those  accidents  in  which  there  were  some  survivors  but  the  cause  of  fatalities  was  not  determined 
have  been  labelled  as  undefmed  (UDF). 

CATEGORIZATION  OP  THE  ACCIDENT  DATA 

PROBABLE  CAUSE  OF  ACCIDENTS 

The  probable  cause  of  the  accidents  is  presented  in  figure  3.4.  ‘Trobable  cause”  is  based  on  the 
determination  of  the  accident  investigation  body.  For  13  accidents  the  cause  is  unknown.  For  140 
cases  where  cause  has  been  determined,  78.6%  of  the  cases  are  attributed  to  the  cockpit  crew, 
11.4%  to  the  airplane,  5%  to  weather,  2.2%  to  the  airport'air  trafAc  controller,  1.4%  to 
miscellaneous,  0.7%  *o  maintenance,  and  0.7%  to  sabotage. 

The  aircraft  was  the  cause  of  the  accident  in  11.4%  of  the  cases.  Landing  gear  systems  and  support 
structure  were  involved  in  seven  accidents.  Failures  involved  brakes,  wheels,  tires,  and  structure. 
Engine  disintegration,  thrust  loss,  and  thrust  reversers  were  involved  in  six  accidents.  Flight 
instrumentation  was  involved  in  two  accidents  and  ground  spoilers  and  elevator  trim  tab  were 
involved  in  one  accident  each. 

From  these  data  it  may  be  concluded  that  about  89%  of  the  accidents  might  have  been  avoided  by 
improved  pUot  assistance  and  ground  control.  The  most  significant  improvements  in  safety  may  be 
obtained  through  accident  avoidance.  Such  items  as  ground  proximity  warning,  wind  shear 
detection,  automated  landing  and  navigation  systems,  and  advanced  integrated  systems  for  pilot 
assistance  offer  the  best  hope  for  eliminating  most  acddents  in  the  “avoidable”  category. 

Improved  ground  control  and  reduction  of  hazards  on  and  around  airports  is  another  area  for 
unproved  safety.  The  avoidance  of  collisions  between  aircraft  and  with  ground  vehicles  should  be 
attainable.  Reduction  of  hazards  such  as  drainage  ditches,  poles,  trees,  columns,  outbuildings,  and 
birds  from  airports  is  a  matter  of  concern.  In  addition  the  short/ovemm  areas  for  runways  could  be 
improved  to  reduce  the  seventy  of  accidents  in  these  areas. 


Table  3. 2- Study  Data  Base. 


101959  707  OSO,  WASHINGTON 
082759  CMT  ASCUNCION 
022060  CMT  BUENOS  AIRES 
071161  DC8  DENVER 
011961  0C8  JFK 
061561  707  LISBON 
122161  CMT  ANKARA 
092461  720  BOSTON 
092761  CVL  BRASSILA 
072761  707  HAMBURG 
060362  707  PARIS,  ORLY 
082062  DCS  RIO  OE  JANIERO 
070363  CVL  CORDOBA,  ARGENTINA 
031864  BAC  WISLEY,  ENG. 

040764  707  JFK 
112364  707  ROME 
032264  CF.T  SINGAPORE 
050265  720  CAIRO 
070165  707  KANSAS  CITY 
110865  727  CINCINNATI 
111165  727  SALT  LAKE  CITY 
091365  880  KANSAS  CITY 
022765  880  IK  I  IS.,  JAPAN 
070466  DCS  AUCKLAND 
082666  880  TOKYO 
030466  0C8  TOKYO 
063066  TRI  KUWAIT 
122466  0C8  MEXICO  CITY 
021566  CVL  NEW  OEl  HI 
110667  707  CINCINNATI 
112067  880  CINCINNATI 
030567  DCS  MONROVIA 
063067  CVL  HONG  KONG 
092967  CMT  ROME 
110567  880  HONG  KONG 
122768  DC9  SIOUX  CITY 
032868  0C8  ATLANTIC  CITY 
061368  707  CALCUTTA 
060368  727  JFK  , 

032168  727  CHICAGO 
020768  707  VANCOUVER,  B.C. 
021668  727  TAIPEI 
040868  707  LONDON 
042068  707  WINDHOEK 
080268  0C8  MILAN 
011469  BAC  MILAN 
101669  DCS  STOCKTON,  CA. 
010569  727  LONDON  GATWICK 
011369  DC8  LOS  ANGELES 
092169  727  MEXICO  CITY 
091269  BAC  MANILA 
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Table  3.2-Study  Data  Base  (Continued) 
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LDG 

FIRE  YES 

092472  0C8 

BOMBAY 

X 

120  0 

0 

LDG 

FIRE  YES 

120872  737 

CHICAGO  MIDWAY' 

X 

61  43 

12 

APP 

FIRE  PAR 

121572  747 

MIAMI 

X 

160  0 

0 

LOG 

YES 

122072  DC9 

CHICAGO  O' HARE 

X 

45  10 

9 

TO 

FIRE  YES 

122972  LIO  MIAMI 

X 

176  99 

60 

APP 

FIRE  NO 

012172  0C9 

ADANA 

X 

'5,1 

7 

APP 

FIRE  UDF 

041772  VC1 

ADDIS  ABABA 

X 

107  43 

7 

TO 

FIRE  UDF 

081,372  707 

JFK 

186  0 

6 

TO 

FIRE  YES 

112872  DCS 

MOSCOW,  USSR 

X 

76  61 

15 

CLI 

FIRE  UDF 

122372  F28 

OSLO 

X 

45  40 

7 

APP 

FIRE  UDF 

122872  F28 

BOLBAO,  SPAIN 

X 

4  0 

4 

LOG 

YES 

030573  707 

DENVER  , 

3  0 

0 

TO 

FIRE  YES 

073173  0C9 

30ST0N,  MASS. 

X 

89  89 

0 

APP 

FIRE  PAR 

112773  0C9  CHATTANOOGA 

X 

77  0 

5  ■ 

APP 

FIRE  YES 

112773  0C9  AKRON,  OHIO 

X 

26  0 

16 

LOG 

YES 

012273  707 

KHANO,  NIGERIA 

X 

202  172  ? 

LOG  FIRE  YES 

053173  737 

NEW  DELHI 

X 

65  52 

? 

APP 

FIRE  YES 

060973  707 

RIO  OE  JANEIRO 

X 

4  2 

0 

APP 

PAR 

102873  737 

GREENSBORO 

96  0 

0 

LOG, FIRE  YES 

061673  707 

BUENOS  AIRES 

86  0 

0 

LOG  FIRE  YES 

062373  DC8 

JFK 

128  0 

8 

LOG  FIRE  YES 

121773  DC9  GREENSBORO 

91  0 

0 

TO 

FIRE  YES 

121773  OCl  BOSTON 

•  X 

151  0 

3 

LOG  FIRE  YES 

121973  707 

NEW  DELHI 

X 

109  0 

3 

LOG  FIRE  YES 

122373  CVL 

MANAUS,  BRAZIL 

X 

57  0 

1 

LOG 

YES 

011674  707 

LOS  ANGELES 

X 

63  0 

3 

LOG  FIRE  YES 

011374  707 

PAGO  PAGO,  AM.  SAMOA 

X  lOl  97 

5 

APP 

FIRE  YES 

091174  0C9  CHARLOTTE,  N.C. 

X 

82  71 

10  APP  FIRE  PAR 

091174  727  PORTO  ALEGRE.BRAZIL 

74  0 

0, 

LDG 

YES 

010174  F28  TURIN,  ITALY 

X 

42  38 

4 

APP 

FIRE  UDF 

WAT 


Table  3.2-Study  Data  Base  .^^oncluded) 
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010274 

F28  IZMIR,  TURKEY 

X 

72  65 

7 

CLI 

FIRE  UOF 

031S74 

CVL  TEHRAN,  IRAN 

X 

96  15 

? 

TAX  FIRE  YES 

112074 

747  NAIROBI,  KENYA 

X 

157  59 

44 

CLI 

FIRE  PAR 

020975 

8AC  LAKE  TAHOE 

X 

44  0 

0 

TO 

YES 

033175 

737  CASPER,  WYO. 

X 

99  0 

1 

LOG 

YES 

062475 

727  JFK 

X 

124  112 

12  APP 

FIRE  PAR 

080775 

727  DENVER 

X 

134  0 

15  CLI 

YES 

092475 

F28  PALEM6ANG 

X 

62  25 

7 

LUG  FIRE  UOF 

111275 

727  RALEIGH,  N.C. 

139  0 

i 

APP 

YES 

111275  DCl  JFK 

X 

139  0 

2 

TO 

FIRE  YES 

111575  F28  NR.  BUENOS  AIRES 

X 

66  u 

0 

APP 

YES 

121675 

747  ANCHORAGE 

121  0 

2 

TAX 

YES 

010276 

OCl  ISTANBUL 

X 

373  0 

1 

LOG  FIRE  YES 

040576 

727  KETCHIKAN  ' 

X 

57  1 

32 

LDG  FIRE  YES 

042276 

720  BARRANQUILLA,  COL. 

X 

4  0 

1 

APP 

FIRE  YES 

042776 

727  ST.  THOMAS,  V.I. 

X 

88  37 

19 

LDG  FIRE  PAR 

062376 

DC9  PHILADELPHIA  ' 

X 

105  0 

36 

LDG 

YES 

121676  880  MIAMI 

X 

3  0 

1 

TO 

YES 

111676 

DC9  DENVER 

X 

85  0 

2 

TO 

FIRE  YES 

030477 

DC3  NIAMEY,  NIGER 

X 

4  2 

2 

.'.PP  FIRE  YES 

031777 

707  PRESTWICK 

X 

4  O' 

0 

TO 

FIRE  YES 

032777 

747  TENERIFE 

X 

396  334 

62 

TAX 

FIRE  PAR 

032777 

747  TENERIFE 

X 

246  246 

0 

TO 

FIRE  YES 

040477 

0C9  NEW  HOPE,  6A. 

,  X 

85  62 

22  APP 

FIRE  PAR 

092777 

OCR  KUALA  LUMPUR 

X 

79  34 

7 

APP 

FIRE  UDF 

100277 

OCR  SHANNON 

X 

259  0 

i 

TO 

FIRE  YES 

111977 

727  MADEIRA 

X 

164  128 

36 

LDG  FIRE  PAR  WAT 

112177 

BAC  8ARIL0CHE,  ARG. 

X 

79.  45 

34 

APP 

UDF 

121877 

CVL  MADEIRA 

X 

57  36 

13 

LDG 

YES  WAT 

041877 

DCS  TOKYO 

X 

140  0 

0 

TO 

YES 

111777 

747  JFK 

3  0 

0 

LDG 

YES 

021178 

737  CRANBROOK,  B.C. 

,  X 

49  42 

5 

LCG  FIRE  PAR 

030178 

OCl  LOS  ANGELES 

X 

197  2 

31 

TO 

FIRE  YES 

030378 

DCS  SANTIAGO  OE  COMPO.' 

X 

222  0 

52 

LDG 

YES 

040278  737  SAO  PAULO 

X 

42  0 

0 

LDG  FIRE  YES 

040478 

737  CHARLROI,  BELGIUM 

X' 

3  0 

0 

LDG  FIRE  YES 

050878 

727  PENSACOLA 

X 

58  3 

11  APP 

YES  WAT 

052578  880  MIAMI 

X 

6  0 

0 

TO 

YES 

062678 

0C9  TORONTO 

X 

107  2 

7 

TO 

PAR 

070978  8AC  ROCHESTER 

77  0 

1 

LDG 

YES 

103179 

DCl  MEXICO  CITY 

X 

87  70 

17 

LDG  FIRE  UOF 

111578 

DCS  COLOMBO,  SRI  LANKA 

X 

259  195 

? 

APP  FIRE  UOF 

121778  737  HYDERABAD,  INDIA 

X 

126  1 

,4 

TO 

FiRE  YES 

122378 

DC9  PALERMO,  ITALY 

X 

129  108 

7 

LOG 

UOF  HAT 

122978  DCS  PORTLAND,  OREGON 

X 

186  10 

23  APP 

PAR 

032578 

720  LONDON 

82  0 

? 

LOG 

YES 

020979 

DC9  MIAMI 

X 

5  0 

1 

CLI 

YES 

021979 

707  ST.  LUCIA 

170  0  , 

0 

APP 

YES 

031479 

727  DOHA, QATAR 

X 

64  45 

15  APP  FIRE  PAR 

042579 

737  MADRAS  ■ 

X 

67  0 

3 

LDG  FIRE  YES 

100779 

DCS  ATHENS 

X 

154  14 

0 

•DG  FIRE  YES 

Selec'ed  impact  survivable  accidents 

^  all  operation  1959-1979  world  wide  air  carriers 

o  <« 


Figure  3.4~Probable  Cause  of  Accidents 


AIRCT’AFT  SIZE 


Accident  caaes  were  categorized  with  respect  to  size  as  measured  by  gross  weight.  The  737,  DC-S, 
Comet  rv,  BAC-111,  Trident,  F28  and  Caravelle  form  a  short  haul  group  up  to  72.5  tonnes.  The 
/20,  727, 880,  and  990  are  included  in  the  72.5  to  113  tonnes  short  haul  group.  The  707  and  the 
DC-8  are  in  the  113  to  158  tonnes  narrow-body  long  haul  group.  Wide-body  aircraft  such  as  the 
L-1011,  DC-10,  and  the  747  are  in  the  over  158-tonne  wide-body  long  haul  group. 

Referring  to  figure  3.5,  it  may  be  seen  that  each  size  group  is  represented  in  the  data  base.  Spialler 
stuvt  haul  aircraft  constitute  approximately  40%  of  the  cases,  larger  short  haul  group  af^noximatidy  20% 
of  the  cases,  narrow-body  long  haul  group  approximately  35%  and  wide-body  long  haul  aircraft 
approximately  •'’%. 

Of  particular  interest  is  the  effect  of  size  on  aircraft  crash  performance  end  survivability.  Considering 
the  effects  of  scale  as  in  dynamic  modeling,  it  nught  be  expected  that  larger  aircraft  would  fare  better 
than  smaller  aircraft  if  the  crash  environment  is  not  scaled  up.  Further,  the  individual  occupant  does 
not  scale  up,  but  becomes  relatively  smaller  in  the  larger  aircraft  rnth  a  corresponding  improvement 
in  his  survival  prospects.  For  instance,  fuselage  structural  elements  such  as  frames  and  stringers  are 
stronger  in  an  absolute  sense  and  offer  greater  energy  absorbing  capability  for  larger  commercial  jet 
aircraft  than  for  smaller  propeller-driven  aircraft.  This  feature  pr;.  rides  an  inherent  crashworthiness  to 
the  jet  as  compared  to  the  propeller  aircraft. 

A  qualitative  assessment  of  the  accident  data  seems  to  indicate  that  relative  size  within  the  jet  group 
has  only  minor  effects  on  the  crash  performance  of  commercial  jet  transports.  In  general,  it  takes  a 
larger  tree,  a  larger  house,  and  a  deeper  or  wider  ditch  to  do  equivalent  damage  to  a  large  aircraft. 
Since  no  two  accidents  are  identical,  an  accurate  comparison  of  damage  between  a  large  and  small 
jet  airframe  cannot  be  made. 

There  is  some  indication  that  there  may  be  some  effect  of  size  between  some  smaller  propeller- 
driven  transport  aircraft  and  the  current  jet  fleet.  Three  accidents  not  included  in  the  study  data  base 
were  reviewed  that  involve  high  wing  propeller-driven  aircraft  of  one  generic  type.  In  these  accidents 
the  seat  response  was  different  from  that  observed  in  survivable  jet  aircraft  accidents  in  that  many 
seats  separated.  Further,  there  were  instances  of  seat  “stacking^  in  the  forward  fuselage  and  seat 
ejection  on  a  large  scale.  These  propeller-driven  aircraft  while  smaller  than  the  jet  aircraft  were 
certified  to  the  FAR  9  g  longitudinal  deceleration  requirement.  But,  because  of  dimensional  and 
structural  arrangement  differences  these  smaller  aircraft  present  a  higher  impedance  to  the  seats 
than  do  the  larger  jet  aircraft.  This  may  account  for  the  different  seat  crash  response  as  seen  by  the 
two  types  of  aircraft. 

AKCBAFT  CONFIGURATION 

Aixident  cases  were  categorized  with  respwt  to  conHguration.  Emphasis  was  placed  on  differences 
between  aircraft  types  and  service  uses.  The  aircraft  fuselage  internal  configuration  was  clasaiBed 
according  to  type  of  service,  i.e.  passenger  or  nonpassenger.  Also  in  the  internal  fuselage 
configuration  is  the  presence  of  body  fuel  cells  and  body  fuel  lines.  The  external  ccmnguratioo 
differences  are  related,  to  fuselage  width,  engine  placement,  landing  gear,  and  fuel  cells. 

Referring  to  Bgure  3.5,  it  may  be  seen  that  approximately  20%  involve  nonpassenger  service. 
Nonpassenger  service  was  further  divided  into  cargo,  training,  and  positioning  flights. 

Regarding  cargo  service,  a  review  of  the  accident  data  shows  some  cases  where  cargo  shift  during 
the  accident  increased  the  hazard  to  the  flight  crew.  A  notable  instance  is  the  Miami  880  accident  on 
December  16,  1976  where  cattle  pens  broke  loi^  during  an  overrun  and  blocked  the 
cockpit  door. 


5.  Fire  Hazs'd 

Fuel  spill  -  tk.  nipt. 
Fuel  spill  -  Eng.  s6p. 

-  TV.  vent 
-Body  fuel  line 
Lwr  body  -  N.  gear  cdl. 
Friction  caused 

6,  Crash  environment 

Rough  terrain 
Smooth  soM  terrain 
Smooth  hard  terrain 
Obstruction  -  columnar 
Obstruction  -  impaling 
Obstruction  -  buildings 

Obstruction  -  ditches, 
roads  -  banks 

Water  at  T.O.  and  Idgs. 

Water  -  ditching  or 
landing  attitude 


10  20  30 

>  ...  1 .  lu. 

No  fire 


r*  No  fire 


Percent  of  total  (153  accidents) 

40  50  60  70 

»  ‘  ‘  . » - 


Ftgure  3.5  -  Accident  Data  Catagories  (Concluded) 


Training  accidents  most  frequently  involve  engine-out  takeoff  attempts.  These  accidents  involve 
extreme  yaw  and  roll  angles  with  ground  strikes  of  wings,  engines  or  aft  fuselage.  Some  accidents 
involve  touch-and-go  landing  practice. 

The  principal  variation  in  structural  configuration  is  in  placement  of  eugmes.  Approximately  60%  of  the 
accidents  involve  aircraft  with  wing  mounted  engines  and  37%  involve  aft  mounted  engines,  while  3% 
involve  wing  and  aft  body  mounted  engines.  The  aft  mounted  engines  only  separated  from  the 
aircraft  due  to  high  acceleration  loading,  while  the  wing/pylon  mounted  engines  separated  both  from 
high  accelerations  and  from  contact  with  external  objects.  The  Comet  IV  has  engines  mounted 
internally  in  the  wings  which  contained  the  engines  in  a  crash. 

Engine  placement  was  observed  to  affect  the  fire  hazard.  Associated  with  the  aft  body  location  is  the 
breaking  of  engine  fuel  lines  and  also  of  body  fuel  lines.  The  wing  pylon  mounted  location  had  in 
addition  to  fuel  line  breaks,  the  rupturing  of  wing  fuel  tanka  due  to  pylon/engine  separation.  Fires 
occurred  in  engines  internally  mounted  in  the  wing. 

The  wide-body  long  haul  aircraft  have  main  body  landing  gear  in  addition  to  the  wing  mounted  gear. 
Here  the  crash  response  was  to  transfer  high  impact  loads  to  the  fuselage  structure. 

With  regard  to  fuel  cells,  the  Comet  IV  has  wing  pod  tanks.  These  tanks  have  separated  due  to  high 
accelerations  and  have  contacted  external  objects.  The  associated  fire  hazard  was 
tank  rupture. 

TYPES  OF  INJURIES 

The  data  base  contaiiu  1 19  accidents  or  67%  involving  fatalities  andfor  serious  injury.  For  this 
study  the  NTSB  definitions  (see  app.  A)  have  been  extended  further  to  identify  the  cause  of  the 
fatality/injury.  Traunu  is  taken  to  mean  that  the  fatality/injury  is  caused  by  mechanical  forces 
such  as  inertia  forces  resulting  from  high  accelerations  or  from  impact  with  the  surrounding 
structure.  Fire/smoke  is  assigned  to  those  fatalities/injuries  that  result  from  bums,  inhalation  of 
hot  gases,  smoke  or  noxious  fumes.  In  some  cases,  passengers  are  presumed  to  have  received 
trauma  injuries  that  prevented  or  slowed  down  their  egress  and  as  a  result  they  died  of  smoke  or 
fiames.  For  those  acddenta  where  the  aircraft  stopped  in  water,  fatalities  due  to  drowning  are 
identified.  No  attempt  has  been  made  to  identify  injuries  (chemical  bums)  due  to  contact  with  raw 
fuel  although  some  instances  have  occurred  in  both  land  and  water  accidents. 

Referring  to  figure  3.5,  it  may  be  seen  that  approximately  35%  of  the  accidents  involve  fatalities  due  to 
trauma,  37%  involve  fuWsmoke.  and  6%  involve  drowning.  With  respect  to  the  serious  injuries,  60% 
involve  trauma,  and  30%  involve  fire/smoke.  It  should  be  noted  that  some  accidents  may  involve 
combinations  of  the  above  causes  of  injury.  ^ _ 

OPERATIONAL  PHASE 

Five  operational  phases  were  used  for  grouping  the  accidents.  These  are  takeoff,  climb,  approach, 
landing,  and  taxi.  Referring  to  figure  3.5,  it  may  be  seen  that  takeoff  involved  22.5%,  climb 
involved  7-9%.  approach  involved  30.5%,  landing  involved  37.1%  and  taxi  involved  2.0%  of  the 
accident  cases. 

The  groupinga  by  operational  phase  are  given  in  Ubie  3.3  with  a  brief  description  of  the  accident 
From  these  data,  the  complexity  of  the  accidents  may  be  obeerved.  While  frequently  there  are 
common  factors  between  accidents,  when  the  deUils  are  considered  each  accident  is  a 
separate  event 


^eb/e  3. 3- Accidents  by  Operational  Phase  r  ■:?!'> 
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Table  3.3-Accldents  by  Operational  Phase  (Concluded) 
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STRUCTURAL  DAMAGE 


The  accident  data  base  contains  133  cases  involving  hull  loss  and  20  cases  involving  substantial 
damage.  There  are  103  cases  in  which  fire  waa  present.  In  approximately  90%  of  these  cases  the 
aircraft  was  a  hull  loss. 

Referring  to  figure  3.5,  it  may  be  seen  that  engine  separation  occurred  in  55%,  landing  gear 
collapse  or  separation  occurred  in  65%,  wing  box  breaks  occurred  in  45%,  fuselage  breaks  occurred 
in  48%,  and  water  ditching  impact  breakup  occurred  in  3%  of  the  accidents.  The  separation  of  an 
engine  and  the  breaking  of  a  wing  box  imply  fuel  spills.  In  some  instances  a  fuselage  break  in  an 
aircraft  with  aft  mounted  engines  also  caused  a  fuel  spill.  Water  ditching  impact  breakup  is 
considered  separately  from  fuselage  breaks  because  in  general  the  forces  involved  are  different. 

FIRE  HAZARD 

Fire  was  present  in  103  accidents.  In  95  of  these  cases  the  aircraft  was  a  hull  loss  and  in  the  others 
the  aircraft  suffered  substantial  damage.  In  addition,  there  were  22  accidents  in  which  a  fuel  spiU 
occurred  but  for  which  there  was  no  fire.  Some  of  these  involved  situations  where  the  aircraft  came 
to  rest  in  water  or  where  the  climatic  conditions,  such  as  low  temperature,  precluded  the 
vapoiixation  of  fuel  or  wheit  terrain  drained  the  fuel  away  from  the  aircraft,  except  for  these 
circumstances,  those  cases  might  also  involve  fire  casualties  or  further  aircraft  damage. 

Containment  of  fuel,  spread/scatter  of  fuel,  and  ignition  of  fuel  constitute  major  areas  of  study  for 
improving  survivability  in  jet  transport  accidents.  Ignition  sources  are  usually  present  in  aircraft 
crashes.  Landing  gear  failure  usually  produces  showers  of  sparks  due  to  friction  of  structure  nibbing 
the  ground.  Hot  sections  of  engines  also  provide  an  ignition  source.  Electrical  arcing  may  occur 
when  the  electrical  compartment  is  penetrated  or  when  electric  wiring  is  severed  as  in  the  instance 
of  engine/pylon  separation. 

CRASH  ENVIRONMENT 

In  crashes,  aircraft  encounter  a  variety  of  hazards.  These  hazards  consititute  a  hostile  environment. 
In  an  attmpt  to  classify  this  environment  hazards  have  been  divided  into  three  general  categories: 
terrain,  water,  and  obstructions. 

Terrain  may  be  further  separated  into  hazards  relating  to  surface  bearing  capacity,  contours  and 
ground  plane  for  contact  by  the  aircraft.  The  characteristics  of  water  are  depth  and  sea  state. 
Obstructions  are  divided  into  four  groups,  based  roughly  on  the  manner  in  which  aircraft  receives 
crash  loads.  These  groups  are  columnar,  impaling,  frontal,  and  other. 

The  hostile  environment  is  shown  in  figure  3.6.  Examples  of  types  of  hazards  that  have  been 
encountered  in  accidents  in  the  data  base  are  shown  in  parenthens.  In  simple  accidents,  one  hazard 
may  be  encountered.  More  complex  accidents  may  involve  several  hazards  encountered  in  various 
sequences. 

COMMENTS  ON  ACCIDENT  DATA 

Some  comments  on  the  content  of  engineering  data  relevant  to  structural  crashworthiness  available 
in  accident  reports  are  in  order.  In  general,  the  content  of  engineering  data  has  increased  over  the 
years  as  the  awareness  of  crash worthine.s.*i  increased.  However,  data  content  has  tended  to  lag 
behind  the  technology. 


STRUCTURAL  DAMAGE 


The  accident  data  base  contains  133  cases  involving  hull  loss  and  20  cases  involving  substantial 
damage.  There  are  103  cases  in  which  fire  was  present.  In  approximately  90%  of  these  cases  the 
aircraft  was  a  hull  loss. 

Referring  to  figure  3.5,  it  may  be  seen  that  engine  separation  occurred  in  55%,  landing  gear 
collapse  or  separation  occurred  in  65%,  wing  box  breaks  oct^urred  in  45%,  fuselage  breaks  occurred 
in  48%,  and  water  ditching  impact  breakup  occurred  in  3%  of  the  accidents.  The  separation  of  an 
engin  e  and  the  breaking  of  a  wing  box  imply  fuel  spills.  In  some  instances  a  fuselage  break  in  an 
aircraft  with  aft  mounted  engines  also  caused  a  fuel  spill.  Water  ditching  impact  breakup  is 
considered  separately  from  fuselage  breaks  because  in  general  the  forces  involved  are  different. 

FIRE  HAZARD 

Fire  was  present  in  103  accidents.  In  95  of  these  cases  the  aircraft  was  a  hull  loss  and  in  the  others 
the  aircraft  suffered  substantial  damage.  In  addition,  there  were  22  accidents  in  which  a  fuel  spill 
occurred  but  for  which  there  was  no  fire.  Some  of  these  involved  situations  where  the  aircraft  came 
to  rest  in  water  or  where  the  climatic  conditions,  such  as  low  temperature,  precluded  the 
vaporization  of  fuel  or  where  terrain  drained  the  fuel  away  from  the  aircraft,  except  for  these 
circumstances,  those  cases  might  also  involve  fire  casualties  or  further  aircraft  damage. 

Containment  of  fuel,  spread/scatter  of  fuel,  and  ignition  of  fuel  constitute  major  areas  of  study  for 
improving  survivability  in  jet  transport  accidents.  Ignition  sources  are  usually  present  in  aircraft 
crashes.  Landing  gear  failure  usually  produces  showers  of  sparks  due  to  friction  of  structure  rubbing 
the  ground.  Hot  sections  of  engines  also  provide  an  ignition  source.  Electrical  arcing  may  occur 
when  the  electrical  compartment  is  penetrated  or  when  electric  wiring  is  severed  as  in  the  instance 
of  engine/pylon  separation. 

CRASH  ENVIRONMENT 

In  crashes,  aircraft  encounter  a  variety  of  hazards.  These  hazards  cimsititute  a  hostile  environment 
In  an  attempt  to  classify  this  environment  hazards  have  been  divided  into  three  general  categories: 
terrain,  water,  and  obstructions. 

Terrain  may  be  further  separated  into  hazards  relating  to  surface  bearing  capacity,  contours  and 
ground  plane  for  contact  by  the  aircraft.  The  characteristics  of  water  are  depth  and  sea  state. 
Obstructions  are  divided  into  four  groups,  based  roughly  on  the  manner  ia  which  aircraft  receives 
crash  loads.  These  groups  are  columnar,  impaling,  frontal,  md  other. 

The  hostile  environment  is  shown  in  figure  3.6.  Examples  of  types  of  hazaurds  that' have  been 
encountered  in  accidents  in  the  data  base  are  shown  in  parenthesis.  In  simple  accidents,  one  hazard 
may  be  encountered.  More  complex  accidents  may  involve  several  hazards  encountered  in  various 
sequences. 

COMMENTS  ON  ACCIDENT  DATA 

Some  comments  on  the  content  of  engineering  data  relevant  to  structiual  crashworthiness  available 
in  accident  reports  are  in  order.  In  general,  the  content  of  engineering  data  has  increased  over  the 
years  as  the  awarenesa  of  crashworthiness  increased.  However,  data  content  has  tended  to  lag 
behind  the  technology. 
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Figure  3.6 -Types  of  Hostile  Environment 


NTSB  reports  with  acddent  dockets  contain  much  valuable  data.  Unfortunately,  due  to  an  executive 
order,  acadents  over  five  years  old,  are  bein^  deleted  from  their  ardiives.  Fur^er,  investigators  are 
leaving  government  service  through  retirement,  transfer,  etc.  making  it  difficult  to  recover  data  on 
older  accidents.  The  NTSB  should  declare  accidents  having  tedujical  value  as  “classics”  and 
preserve  these  dockets  indefinitely. 

One  observation  on  accident  reports  is  that  it  is  difficult  to  simply  differentiate  accident  severity 
between  cases  from  the  text.  It  is  often  necessary  to  delve  through  the  structures  and  human  fac¬ 
tors  reports  in  the  dockets  to  make  this  distinction.  Use  of  the  severity  index  developed  in  the  part 
of  section  4.0  titled,  Accident  Severity  and  Survivability,  of  this  report  would  help  to  resolve  this 
difHculty.  This  index  could  be  extended  to  cover  tire  hazard. 

With  due  regard  for  the  availability  of  data  at  the  scene  of  the  accident,  it  is  felt  that  participation  of 
structural  subsystems  reported  may  be  influenced  by  the  anticipations  of  the  investigator.  For 
instance,  where  fuselage  breaks  have  occurred  it  may  be  usual  for  ceiling  panels,  sidewalls  and 
overhead  storage  to  be  disrupted.  Therefore,  these  items  may  not  be  mentioned  in  the  reports. 
Sources  and  sizes  of  fuel  spills  could  be  better  reported. 

With  the  advent  of  better  simulation  techniques  more  accurate  data  on  impact  conditions,  surface 
conditions,  slide  out  distances,  hazard  definition,  etc.,  will  be  useful  in  upgrading  crashworthiness 
technology.  Continued  emphasis  on  the  definition  of  injury  mechanisms  is  needed. 

Many  foreign  accident  reports  are  quite  thorough  in  the  coverage  oi  accidents  while  others  simply 
report  the  barest  details.  More  cooperation  and  assistance  through  ICAO  or  directly  with  the  foreign 
agencies  might  upgrade  these  reports. 

Finally,  the  availability  of  a  team  of  crashworthy  specialists  drawn  from  NASA  and  the  FAA  to  assist 
the  investigating  authorities  may  prove  useful.  The  NTSB,  FAA,  and  NASA  should  consider  this 
option. 

CRASH  SCENARIOS 

Scenarios  to  identify  a  general  sequence  of  crash  events  or  condition  that  produce  the  failure 
mechanisms  of  the  au'craft  structuire  and  the  injury  mechanisms  for  the  aircraft  occupant  have  been 
developed.  Scenarios  for  the  complete  aircraft  are  necessary  where  there  is  signincantinteraction 
between  constituent  elements  of  the  aircraft,  where  the  sequence  of  damage  is  important  to  the 
crash  response,  and  to  establish  initial  conditions  for  the  study  of  isolated  components.  , 

The  underlying  philosophy  for  scenario  development  was,  first,  tfad  scenarios  mpst  produce  the 
failure  mechanisms  of  the  structure  and  the  injui^  mechanisms  for  the  occupants.  Second,  the 
scenarios  should  encompass  available  accident  experience.  Third,  the  scenario  should  assist  in  the 
identification  of  crash  technology  requirements  and  allow  study  oi  the  crash  phenomena. 

SCENARIO  DEVELOPMENT 

The  initial  phase  in  the  development  of  crash  scenwos  consisted  of  review  and  study  of  historical 
accident  data  to  identify  and  deHne  broad  categories  of  occurrence  relative  to  structural  break-up 
and  injury  factors.  Structural  failure  mechanisms  were  identified  and  are  listed  in  table  3.4.  Types  of 
injuries  were  identiried  and  are  listed  in  table  3.5.  The  data  extraction  form  is  given  in 
appendix  B. 

After  an  analysis  of  the  structural  and  injury  mechanisms,  three  beak  scenarios  evolved.  These  are 
“Air  to  Surface”,  “Surface  to  Surface”,  and  “Flight  Into  Obstructioia”. 


Table  3.4-Failure  Mechanisms 


•  Fuselage 

e  Wing 

Crush  (axial  &  vert) 

Breaks 

Bending  breaks 

Wing  bcx  destruction 

Local  deformations 

Distortion 

Tangential  damage 

•  Engines/pylons 

•  Gear 

Separation 

Separation 

Collapse 

*  Seats 

e  Hatch/door/flocr 

Separation 

Distortion 

Distortion 

Destruction 

Rupture 

Separation 

•  Interiors 

•  Belts/harness 

Galley/dividers  separation  >  spillage 

Rupture 

Compartment  separation  -  spillage 

Ejection 

Panel  dislodgement 

_  1 

Table  3.5-Injury  Types 


•  Trauma 

•  Fire/smoke/noxious  gases 

Head 

Fracture,  concussion  . 

Burns 

Neck 

Fracture 

Vascular  damag.f 

Chest 

Cnjsh,  rib  fracture 

Asphyxiation 

Spine 

,  Fracture 

Limbs 

Fracture,  amputation 

•  Drowning 

' 

BASIC  rc:.\ARIO  -  AIR  TO  SURFACE 


This  scenano  considers  those  accidents  in  which  the  aircraft  impacts  a  level  surface  from  the  air.  The 
accident  is  characterized  by  high  sink  rates.  The  crash  variables  are  shown  in  table  3.S. 

Aircraft  configuration  may  have  individual  landing  gear  up  or  down.  Aircraft  weight  variables  are  the 
fuselage  weight  distribution  and  the  fuel  load  distribution. 

Aircraft  initial  conditions  are  three  components  of  linear  and  angular  velocity,  and  three  components 
relating  the  aircraft  orientation  relative  to  the  surface.  Aerodynamic  loads  may  be  significant  for  those 
cases  where  the  'orward  velocity  is  greater  than  V3  (stall). 

Surface  loads  are  due  to  the  resistance  of  the  surface.  For  land,  this  may  vary  from  soft  mud  to 
runway  hardness,  while  for  water,  loads  are  infiuenced  by  sea  state  and  are  in  accordance  with  the 
laws  of  hydrodynamics.  Surface  load  characteristics  may  vary  as  the  air<^t  progresses  through  the 
accident. 

Following  initial  impact,  subsequent  hazards  may  be  encountered.  For  simplification,  obstructions 
are  separated  into  three  types;  columns  representing  trees,  poles,  and  towers  that  resist  mu  ion  in 
the  X  and  y  direction  and  are  local;  the  ditch  or  hump  representing  vertical  termin  changes  01  the 
form  Ao  (1-  cos  XL)  and  may  be  local  or  apply  to  broad  sections  of  the  aircraft,  and  the  step 
function  which  forms  a  vertical  boundary  representing  walls,  buildings,  vehicles,  and  other 
obstructions. 

These  obstructions  may  be  symmetrically  or  asymeixically  located  and  may  be  applied  to  landing 
gear,  engi  as,  wings,  and  fuselage  separately  or  in  combination. 

BASIC  SCENARIO  -  SURFACE  TO  SURFACE 

This  scenario  considers  those  accidents  in  which  the  aircraft  on  the  ^und  encounters 
obstructions.  T’C  accident  is  characterized  by  horizontal  motion  into  the  hazard.  As  such  it  treats 
cases  of  hitting  vehicles,  buildings,  soft  earth,  ditches  or  humps,  entering  water,  and  sliding 
contact  with  the  surface.  Accident  variables  are  similar  to  those  described  for  the  Air  to  Surface 
scenario  with  values  appropriate  to  the  accident  conditions. 

BASIC  SCENARIO  --  FUGHT  INTO  OBSTRUCTION 

This  scenario  considers  those  accidents  in  which  the  aircraft  flies  into  obstructions.  The  accident  is 
characterized  by  high  kinetic  energy  and  by  the  location  and  direction  of  the  impact  loads.  Further 
these  accidents,  tend  to  be  complex,  encountering  a  sequence  of  obstructions, 

SCENARIO  SUBSETS 

The  basic  scenarios  are  divided  further  into  subsets.  The  Air  to  Surface  set  has  4  subsets  as  follows: 


SIO: 

no  further  definition 

(2) 

Sll; 

impact  on  other  than  gear 

(13) 

S12: 

impact  on  gear 

(31) 

S13: 

impact  in  water 

(7) 

Table  3.6-Crash  Variables 


A/C  configuration 

m  jividual  gear:  Up/down 

Weight  dist.:  Fuselage 

Fuel 

A  C  initial  conditions:  XDOT,  YOOT,  ZDOT  (  Coord  system 

Phi.  THETA.  PSI  I  aligned  with  inertial 

PHIDOT,  THEDOT.  PSIDOT  (  reference  frame 

, aerodynamic  loads:  Lift  distribution 

Surface  loads:  (Earth/water): 

Spring  rats  (may  be  distributed  in  space) 

Friction  coefficient 
Slope  of  surface 

Subsequent  hazards  (not  always  encountered) 

Columns 

Oitch  or  hump  Ao  (1  -cos  XL) 

/  F  -*20(6) 

Step  function  |  6  -  1  F  -  -Zo 

I  6=0  F  =  0 

Hazards  may  be  Symmetric  or  assymmetric 

Applied  to  gear,  engine,  wing,  fuselage 
separately  or  in  combination 


The  Surface  to  Surface  set  haa  5  subeeta  aa  follows: 


S20:  hard  ground  or  on  runway  (2) 

S21:  soft  surface  (13) 

S22:  low  obetruction  (35) 

S23:  high  obstruction  (9) 

S24:  alide/roll  into  water  (2) 

The  flight  into  obstructions  set  haa  4  subsets  as  follows: 

S31;  wing  low  (8) 

S32:  impact  column  (16) 

S33:  impact  solid  wall  (3) 

S34:  impact  high  obstruction  (3) 


The  accidents  have  been  grouped  by  basic  scenario  and  by  subset  in  table  3.7.  A  fourth  category 
(S4)  contains  nine  accidents.  For  these  acddenta  there  was  insufficient  information  in  the  flies  about 
the  accident  for  scenario  classification  or  the  accident  was  of  a  peculiar  nature  such  as  the  D(}-d  in 
Shannon  or  the  707  in  London.  However,  the  consequences  of  these  accidents  warrant  their 
retention  in  the  data  base. 

In  some  instances,  it  was  difficult  to  place  an  accident  in  one  bask  scenario  rather  than  another.  This 
is  due  in  part  to  the  complexity  of  some  of  the  cases  and  in  part  to  the  paucity  of  the  available 
accident  descriptions.  Effort  should  be  made  to  sharpen  the  distinction  between  the  existing  sets 
and  to  clarify  the  subsets  from  future  acddenta  In  addition  some  provision  should  be  made  for 
inclusion  of  a  fuel  spill  factor  in  the  subsets. 

Finally,  classifications  have  been  based  on  history.  Types  of  new  accidents  coming  into  the  data 
base  should  have  a  significantly  different  distribution  from  these  of  the  first  20  yeara  This 
distribution  might  be  expected  to  be  strongly  affected  by  improvements  in  accident  avoidance 
techniques  and  be  reduction  of  hazards  on  and  around  airports.  Development  of  Are  suppresaiog  fuel 
additives  could  not  only  alter  the  distributioo  of  acddenta  among  scenarios  but  could  change  the 
significance  of  structural  component  partidpation  in  acddenta.  If  a  leas  severe  impact  survivsl^ty 
criterion  were  applied  to  the  data  base,  some  subsets  t^L^t  be  eliminated  and  the  distributioo  of 
acddenta  by  subset  might  be  modified.  Oinsequently,  the  scenarioo  should  be  reviewed  at  intervals 
to  ensure  their  continuing  applicability.  Further,  the  scenarios  should  reflect  current  behavior  rather 
than  that  drawn  from  the  complete  history. 

CATEGORIZATION  OF  CRASH  IMPACT  COI^ITIONS  FOR  CRASH  SCENARIOS 

An  assessment  of  the  seddents  with  respect  to  the  initial  conditions  has  been  made.  It  should  be 
noted  that  acddenta  in  the  data  base  are  potentially  impact  survivabie  and  that  inherent  structural 
capability  of  the  airframe  already  provides  a  high  level  of  safety.  Omaequently,  for  many  accident 
types  the  areas  of  interest  for  impact  research  lie  at  the  extreme  limits  of  observed  conditions  or 
beyond.  For  other  accidents  the  severity  of  the  acddenta  was  more  a  function  of  hazards 
encountered  and  somewhat  independent  of  the  normal  initial  conditions. 

Crashes  on  approach  usually  occur  because  the  aircraft  is  not  where  the  pilot  thinks  it  ia.  Forward 
•peed  of  the  aircraft  is  between  the  speed  for  flap  deployment  (Vp)  end  stall  (Vg).  The  rate  of 
descent  is  between  0  and  2400  ft/min.  If  defensive  action  (flare)  is  taken.  My  to  avoid  ground 
contact,  even  a  slight  climb  may  be  achieved.  However,  for  reeesreb  purpoees,  the  lower  limit  of 
zero  may  suffice.  The  angle  of  the  aircraft  relative  to  the  ground  is  dependent  on  the  slope  of  the 


Table  3.7-Crash  Scenarios 
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•  TAIk  UO»A  laPACt*Nlf  BLirti 

MkaiWfAll.  k»C  MIT  N«T«  >*;P*T  IMl^f.IPkOSIO*  0*  Ui  ANtlOaP 
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Li/*t  *'U«Aliwo»kHA*lB»CRAAM€k  INTO  iT  •  OktP  PAVIkk 
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lArACI  •AfVA^PkA  UNWAAfl; 

lAPkk'TkP  kkPkk*«AVAk  OP  AkV  Akkk»PAf  BBOmmtJ 


Table  3.7-^Crash  Scenarios  (Continued) 
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Table  3.7~Crash  Scenarios  (Concluded) 
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ground  and  the  attitude  of  the  aircraft  An  aircraft  attitude  of  -5*  was  observed  in  the  727  Cincinnati 
accident  wher«  a  9”  ground  slope  was  encountered.  The  upper  limit  ia  the  angle  at  stall  speed  as  in 
the  737  accident  at  the  Chicago-Midway  airport.  The  airci^  gross  weight  is,  weight  at  takeoff  less 
weight  of  fuel  burned. 

For  landing  accidents,  forward  speed  may  be  above  the  prescribed  landing  speed  or  at  stall  speed. 
Instances  of  higher  speeds  generally  resulted  in  overruna.  Forward  speed  at  onset  of  overrun,  is 
usually  less  than  the  prescribed  landing  speed  due  to  pibt  deceleration  measures.  Angle  of 
incidence  is  between  2.5*  nose  down  to  the  nose  up  stall  an^.  Rate  of  descent  is  between  0  and 
2400  ft/min. 

The  forward  speed  in  taxi  accidents  is  leas  than  60  kts.  Taket^ accidents  involve  forward  speeds  of 
up  to  rotation  speed  (V|^  for  both  overrun,  veer-off  of  runway,  and  contact  with  obstructions  on 
the  runway.  Aircraft  gross  weight  ranges  up  to  maximum  takeoff  gross  weight.  Aircraft  attitude  is 
essentially  wings  level  and  tero  incidence. 

Accidents  fw  initial  climb  involve  loss  or  reduction  in  power  and/or  wing  stall  Forward  speed  range  is 
from  V|{  to  Vp.  These  accidents  may  involve  impacts  where  the  aircraft  is  tail-down  or  wing  low,  or 
large  angles  of  yaw  and  roll  or  a  combination  of  the  above.  Rate  of  descent  might  be  expected  to  be 
in  the  range  of  that  for  a  hard  landing,  i.e.,  0  to  2400  ft/min. 

It  should  be  noted  that  the  accident  data  reports  do  not  contain  sufficient  identification  of  conditions 
at  the  onset  of  the  crash  to  be  more  precise.  Techniques  are  being  developed  by  NASA  Ames  that 
could  better  define  these  initial  conditions  where  data  from  the  Flight  Data  Recorder  and  from  the  Air 
Traffic  Controller  radar  is  used.  However,  to  date  no  program  to  establish  these  values  exists. 

F  urther,  effects  of  last  second  evasive  actions  by  the  flight  crew  and  influence  of  terrain  features  on 
'effective*  impact  conditions  must  be  included  for  purposes  of  simulating  the  crash.  Flight  crew 
actions  may  be  obtained  from  further  development  of  the  Ames  technology. 

Value  limits  of  initial  conditions  observe  for  each  subset  scenario  are  shown  in  table  3.8.  These 
values  may  be  used  to  give  approximate  ranges  of  crash  initial  conditions  for  the  scenarios 
for  research. 


Table  3.8-Value  Limits  of  Initial  Conditions 
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4.0  ROLE  OF  STRUCTURAL  COMPONENTS  IN  CRASHWORTHINESS 

In  thin  section  the  structural  components  that  significantly  participate  in  or  influence  the  crash 
dynamic  behavior  are  studied.  Aircraft  structural  components  that  participate  and  their  role  in 
crashes  are  identified  from  the  accident  data.  This  participation  is  summarized. 

A  matrix  relating  the  participation  of  structural  systems  to  the  scenarios  defined  in  section  3  is 
presented  and  assessed.  An  accident  structural  damage  severity  index  is  presented.  This  index  is  a 
function  of  major  component  participation.  The  relationship  between  the  scenario  and  the 
structural  damage  severity  index  is  assessed. 

Interactions  of  the  structural  components  as  observed  from  the  accident  data  have  been  identified 
and  discussed.  Problem  areas  for  current  structural  components  are  discussed  and  assessed. 
Finally,  crashworthiness  implications  of  the  application  of  advanced  materials  in  these  structural 
components  are  considered. 

PARTICIPATION  CF  STRUCTURAL  COMPONENTS 
IDENTinCATION  OF  STRUCTURAL  COMPONENTS 

The  accident  data  base  was  reviewed  to  identify  structural  components  that  participate  in  the  aircraft 
crash  dynamic  response.  Results  of  this  review  are  shown  in  table  4.1.  This  table  identifies  the 
component  crash  function,  crash  dynamics,  interaction  with  other  components,  and  results  of  this 
interaction. 

The  components  are  the  landing  gear,  pylon/engine,  wing  box  structure,  fuselage,  fuel  distribution 
system,  floor  structure,  aeats/restraint  systems,  cabin  interior,  and  entry  and  escape  doors.  The 
landing  gear  includes  nose  gear,  wing  mounted  main  landing  gear,  and  wide>body  fuselage 
mounted  gear.  Pylon/engine  include  wing  pod  mounted  engines  and  aft  body  engines.  Wing  box 
structure  is  concerned  basically  with  fuel  tankage  and  primary  load  carrying  members.  Fuselage 
includes  lower  fuselage,  (bottom  of  fuselage  to  the  cabin  floor  structure)  and  upper  fuselage  (floor 
structure  to  crown).  Cabin  interiors  include  overhead  storage,  galleys,  closets,  ^viders,  lavatories, 
ceiling  panels,  sidewalls,  etc. 

COMPONENT  PARTICIPATION 

Participation  is  summarized  in  table  4.2.  The  major  diagonal  gives  the  total  participation  of  any 
component  while  the  off-diagonal  values  shows  coparticipation  of  other  components.  In  addition  to 
the  components,  hull  losses  and  accidents  involving  Are  are  included. 

From  th^  data,  general  component  participation  and  interaction  of  components  may  be  obtained. 
However,  in  order  to  obtain  the  signiflcance  of  the  interaction  and  role  of  components  in  crashes  a 
more  detailed  assessment  is  required  (see  part  of  section  4.0  titled.  Interaction  of  Structural 
Components). 

MATRIX  CATEGORIZATION 

Table  4.3  presents  a  matrix  relating  critical  structural  components,  fatalities,  and  aoddent  severity  to 
the  crash  scenarios.  Fatalitieo  are  divided  into  groups  by  cause:  Are  r^ted,  trauma,  drowning,  and 
unknown  (UNK).  Percentiles  relate  to  the  number  of  occupants  participating.  The  known  frequency 
of  participation  of  structural  components  identiAed  is  shown  for  each  major  scenario  and  for  subsets. 
Included  in  this  table  are  the  number  of  accidents,  hull  losses,  and  Ares.  Finally,  the  frequency  of 
occurrence  for  each  accident  severity  deAned  in  table  4.3  is  ahoam. 
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Table  4. 1-Structural  Systems  (Continued) 


Table  4. 1-Structural  Systems  (Concluded) 


Numbers  of  Accidents  -  153  Total 


Table  4.3-Categorization  by  Scenario 


On  the  baaiB  of  percent  of  fatalitiee,  flight  into  obetructions  (S3)  is  the  most  lethal  scenario,  i  aiio  wed 
by  air  to  surface  (Si),  unclnssitled  (S4),  and  surface  to  surface  (S2).  Hia  order  t^ds  to  agree  with 
the  total  energy  to  be  dissipated  in  the  crash.  The  frequency  of  fire,  while  not  independent  of  the 
total  energy,  further  increases  the  lethality  of  the  scenario.  In  fact,  the  major  f«:tor  in  fatalities  is  fire. 

(Considering  total  fatalities,  the  ranking  of  the  basic  scenarios  is  air  to  su:  W'e  (Si),  flight  into 
obstructions  (S3),  surface  to  surface  (S2),  and  unclassified  (S4).  On  the  basis  of  numbers  of 
accidents,  the  rankuig  becomes  surface  to  surface  (S2),  air  to  surface  (Si),  flight  into  obetnictions 
(S3),  and  unclassified  (84). 

No  single  scenario  appears  to  be  ‘^he  major  type  for  lethality”,  rather  eadi  must  be  studied  to  fully 
understand  the  crash  response  of  aircraft.  As  starting  points,  it  appears  thatair  to  surface-impact 
on  gear  (S12),  surface  to  surface— low  obstruction  (S22),  and  flight  into  obstruction— impact 
column  (S32)  are  likely  candidates. 

To  obtain  improve  craahworthic'^  each  structural  component  must  perform  its  crash  function. 
For  instance,  when  the  strength  capability  of  landing  gear  is  exceeded,  the  gear  should  separate 
without  tearing  fuel  tanks  or  damaging  fuel  or  hydraulic  lines.  TjimKng  gear  should  perform  in 
each  scenario  over  the  range  of  accident  variables.  In  like  manner  eadi  qrstem  should  be  studied. 
This  should  provide  an  envelope  of  capabilities  for  the  aircraft. 

ACCroENT  SEVERITY  AND  SURVIVABItJTY 

Acddenta  have  been  assessed  on  the  basis  of  amount  of  damage  to  the  aircraft  and  effect  of  this 
damage  on  survivability.  Accidents  in  the  data  base  were  assessed  into  six  categories  of  accident 
severity  shown  in  table  4.4.  In  general,  the  degree  of  structural  damage  and  the  energy  to  be  dis¬ 
sipated  increase.*;  as  the  category  increases. 

Categories  1  through  3  involve  accidents  in  which  the  occupant  inotective  shell  is  generally 
maintained  but  fuel  spill  factor  increases  with  category.  At  category  4,  the.  fuselage  break  is 
introduced  but  the  fuel  system  is  intact.  Three  classes  of  fuselage  break  are  u  ;ed  to  rii«ringiii«h  the 
severity  of  the  accident.  A  class  1  break  has  the  fuselage  broken  with  fusdage  sections  essentially 
remaining  together.  The  opening  allows  fuel/fire  entry  but  is  too  small  for  occupant  egress.  In  class  2 
breaks,  the  fuselage  separates  sufficiently  to  allow  occupant  egress  ami  fiwiyfire  entry,  but  the 
section  maintain  a  proximity  to  one  another.  Class  3  breaks  have  fuselage  sections  separate  and 
come  to  rest  at  some  distance  from  each  other. 

Category  4  accidents  are  severe  accidents  involving  either  severe  lower  fusdage  crush  or  class  1  or 
2  breaks,  or  both.  However,  in  category  4  there  are  no  major  fud  qnlla  Categmies  5  and  6  involve 
increasingly  severe  destruction  of  the  aircraft  with  serious  breaks  in  fed  tankage. 

The  If  )  accidents  in  the  data  base  have  been  grouped  by  category  and  are  summarized  in  table  4.5 
and  figme  4.1.  From  data  in  table  4.5  mid  figure  4.1  some  general  observatioiu  may  be  made.  First, 
with  regard  to  ovmall  survivability,  fire  presents  the  greatest  hazard.  Known  fire  fatalities  outnumber 
known  trauma  fatalities  by  2.84  to  1.0.  Fire  hazard  is  most  severe  for  accidents  having  major  fud 
spills  due  to  rupturing  of  fuel  tankage  (categories  3,  5,  and  6). 

Trauma  fatalities  occur  mostly  in  categories  5  and  6  which  involve  sev«e  fuselage  breaks.  The 
single  instance  in  category  2  resulted  from  a  local  loss  of  survivable  volume  and  five  instances  in 
category  3  resulted  from  severe  lower  'uselage  crush. 

Deep  water  impact  accidents  represent  less  than  10%  of  the  study  data  base  hot  have  a  high  fatality 


Table  4.4~Categones  of  Accident  Severity 


1 .  Minor  impact  damage  -  irK:ludes  engine/pyion  damage  or  separation,  mirxx  lower  fuselage  damage, 
and  minor  fuel  soiilage. 

2.  Moderate  impact  damage  -  includes  higher  degrees  of  damage  of  category  1  and  includes  gear 
separation  or  collapse. 

3.  Severe  impact  damage  but  no  fuselage  break  -  includes  major  fuel  spillage  due  to  wing  lower  surface 
tear  and  wing  box  damage. 

4.  Severe  im(><.'Ct  damage  -  includes  severe  lower  fuselage  crush  and/or  class  1  or  class  2  fuselage 
breaks,  may  nave  gear  collapse,  but  no  tank  rupture. 

5.  Extreme  impact  damage  -  includes  class  1  or  class  2  fuselage  breaks  with  wing  separation  or  breaks, 
may  have  gear  and/or  er>gine  separation,  and  fuel  spillage. 

6.  Air^  aft  destruction  -  includes  class  3  fuselage  breaks  or  destruction  with  tank  rupture,  gear  andJot 
ermine  separation. 

Fuselage  break.«:  Class  1  -  sections  break  but  remain  together 
Class  2  >  sections  break  and  open 


Class  3  -  sections  break  and  move  off 


Number  of  accidents 


46 


Figure  4.1 -Accidents  by  Category 


rate.  Little  structural  or  detailed  information  is  available  on  several  accidents  in  which  a  large 
percentage  of  the  occupants  perished.  Water  impact  usually  results  in  severe  damage  to  the  lower 
fuselage,  often  accompanied  by  class  2  brealu  in  the  fuselage  and  separation  of  wings,  engines, 
and  landing  gear.  In  some  cases  many  occupants  drowned  after  evacuating  the  aircraft.  In  some 
cases  the  high  fatahty  rate  was  due  to  inappropriate  action  of  the  cabin  crews  after  the  aircraft  came 
to  rest 

Last,  as  might  have  been  anticipated,  the  overall  survivability  generally  decreases  as  the  major 
structural  damage  to  the  aircraft  increases.  For  categories  6  and  6,  known  fatalities  due  to  fire  and  to 
trauma  appear  in  almost  equal  numbers.  While  these  categraries  also  have  t^e  largest  percentages  of 
undefined  fatalities,  it  is  not  expected  that  the  results  would  be  changed  if  a  full  definition  of  fatalities 
were  availaible. 

Category  1  accidents  experienced  only  minor  structural  damage.  There  were  three  hull  losses  and 
53  fatalities  due  to  fire.  Two  accidents  involve  fires,  caused  by  separation  of  an  engine,  that 
resulted  in  a  catastrophic  explosion  of  the  wing  tanks.  In  both  instances,  fatalities  occurred  when 
tanks  exploded  while  the  aircraft  were  being  evacuated.  Another  accident  involved  a  fire  due  to 
penetration  of  the  wing  tank  by  debris  thrown  up  from  landing  gear.  In  this  instance  the  aircraft 
was  successfully  evacuated  but  was  destroyed  by  fire. 

Category  2  accidents  involve  only  one  fatality.  In  this  case  the  trauma  fatality  occurred  as  the  aircraft 
penetrated  the  airport  terminal.  The  purser  was  killed  when  the  hull  was  ruptured  by  a  building 
column.  Thu  accident  is  an  anomaly.  There  are  12  hull  losses,  2  of  which  were  due  to  slowly 
spreading  fire.  Two  accidents  involved  engine  separation  and  fuel  line  fires  while  another  accident 
was  a  friction  fire  due  to  nose  gear  collapse. 

Category  3  accideuta  involve  at  least  722  fire  related  fatalities  and  5  trauma  fatalities.  There  are 
three  accidents  involving  179  occupants  and  130  fatalities  that  are  undefined.  The  D&8  Toronto 
accident  was  placed  in  this  category  because  of  the  major  fuel  spill  due  to  tank  rupture  as  the 
engine/pyion  separated.  The  108  fatalities  are  treated  as  fire  related  because  the  wing  fuel  tank 
exploded  in  the  air  while  attempting  a  goaround.  The  five  trauma  fatalities  were  in  the  KLM  Tenerife 
accident;  and  were  in  the  lower  fuselage  and  were  ejected.  Dtownings  accounted  for  18  fatalities,  at 
least  15  of  which  occurred  after  evacuation. 

Category  4  involves  225  fatalities  of  which  55  are  from  fires  not  due, to  tank  rupture,  165  due  to 
drowning,  and  5  to  trauma.  One  of  these  was  the  727  Salt  Lake  City  accident  in  which  fire  resulted 
from  a  hard  landing  that  caused  a  ruptured  fuel  line. 

In  most  accidents  involving  drowning,  few  details  are  avulable  except  for  the  DC-9  St  Croix 
^  accident  In  this  case  the  drcwninge  are  thought  to  occur  after  evacuation  and  trauma  fatalities  were 
'  due  to  seat  separation  due  to  floor  distortion  and  to  who  did  not  use  the  seat  Mta. 

Category  5  involves  934  fatalities  of  which  45%  are  of  undetermined  causes.  Of  the  known  causes  of 
fatality,  335  are  related  to  fire  and  210  are  related  to  trauma.  The  747  Pan  Am  Tenerife  accident 
accounts  for  36%  of  the  fatalities,  with  144  deaths  of  undetermined  cause.  In  this  accident  trauma 
fatalities  were  due  to  the  destruction  of  the  upper  aft  fuselage  by  the  KLM  747  and  the  entiy  of  the 
KLM  engine  pod  into  that  eection  of  the  aircraft  Further,  burning  fuel  from  the  Pan  Am  ruptured  wing 
was  qrrayed  into  the  area  trapping  most  of  those  not  killed  by  trauma.  The  four  known  trauma 
fatalities  in  the  727  Cincinnati  accident  were  due  to  complets  destruction  of  the  cockpit  area.  The 
10  trauma  fatalities  in  the  DC-8  Portland  accident  were  doe  to  intrusion  of  a  large  tree  into  the 
forward  fuselage. 


Category  6  involves  1547  fatalities  of  which  59%  were  of  undetermined  causes.  Of  the  known  causes 
of  fatahty,  189  are  related  to  fire  and  190.are  related  to  trauma.  In  four  accidents,  only  the  fate  of  the 
flight  deck  crew  is  defmed  although  there  are  indications  of  cause  with  terms  as  *^any*  or  ‘^oet”. 
The  enormity  of  many  accidents  and  shortage  of  pathological  skills  preclude  accurate  postmortem 
determination  of  cause. 

RELATIONSHIP  BETWEEN  SCENARIO  AND  ACCIDENT  SEVERITY  CATEGORIES 

Combining  the  structural  damage  severity  category  with  the  '^^en/'rios  shows  scenario  development 
should  include  accidents  having  severity  categories  of  3  through  5.  Category  6  accidents  represent 
consumption  of  all  the  aircraft’s  protective  structure.  However,  provisions  made  for  less  severe 
accidents  would  tend  to  improve  the  crashworthiness  in  some  aret  s  even  in  category  6  accidents. 

Consequently,  research  efforta  should  be  directed  towards  better  defining  the  crash  scenarios  to 
represent  this  severity  range.  The  improved  definition  includes  initial  conditions,  aircraft  motions, 
hsoards  encountered,  and  crash  response  of  the  systems.  Methods  of  simulation  should  be 
developed  that  permit  study  of  the  parameters  that  affect  the  crash  response  so  that  these  might  be 
subjected  to  a  more  thorough  engineering  treatment. 

INTERACTION  OF  STRUCTURAL  COMPONENTS  AND  AIRCRAFT  SYSTEMS 

Most  substantial  damage  or  hull  loss  accidents  that  are  impact  survivable  will  involve  damage, 
destruction,  or  loss  of  one  or  more  structural  components  and  aircraft  systems.  During  the 
sequence  of  events  as  the  destruction  occius  and  the  aircraft  come  to  a  stop,  the  lives  of  persons 
onboard  are  being  jeopardized.  In  the  153  accidents  reviewed  in  this  study,  it  was  determined  that 
the  most  critical  event  in  the  sequence  that  caused  most  fatalities  was  the  releasing  and  ignition  of 
fuel  which  then  developed  into  severe  fires.  For  those  persons  not  injurrd  by  impact,  the 
probability  of  survival  was  determined  by  time  (measured  in  minutes  and  seconds)  and  by  the 
impedimenta  in  the  escape  route.  In  onier  to  deHne  approaches  to  improve  the  crashworthiness  of 
transport  aircraft  it  is  necessary  that  the  involvement  of  the  structuj^  components,  systems,  and 
subsystems  be  determined  and  the  sequence  of  events  and  interaction  of  their  involvement  in  a 
variety  of  accidents  be  well  understood. 

Discussion  of  the  major  hazards,  the  dominant  structural  components,  and  the  interaction  as  relating 
to  KwivabUity  is  provided  in  the  following  sections. 

WIN  G  BOX  -  INTEGRAL  FUEL  SYSTEM 

Severe  fuel  fires,  that  are  the  primary  cause  of  most  fatalities,  result  from  imwanted  release  or 
spillage  of  tank  fuel.  In  this  study  it  was  found  that  107  accidents  involved  tank  fuel  spillage  and  85 
of  these  had  flies  of  varying  severity.  Spillage  directly  from  the  integral  tank  usually  occurs  from  six 
types  of  events:  wing  box  fracture  or  break,  lower  wing  akin  tear  or  rupture,  penetration  of  the  tank 
by  an  object,  tearing  open  the  wing  box  during  separation  of  main  landing  gear  or  engine  pylon,  fuel 
tank  ullage  explosion,  and  flow  from  wing  tip  vents.  In  a  given  accident  two  or  more  of  these  types  of 
spillage  sometimes  occurs.  Iliese  types  are  shown  in  figure  4.2. 

Fuel  spillage  diie  to  wing  break  occurrences  have  been  assessed  with  regard  to  incidence  of  fire  and 
fire  related  fatalities.  The  area  of  the  spill  has  been  assessed  where  ’Targe"  is  30  meters  or  larger  in 
diameter,  ‘’medium*  is  10  to  30  meters  in  diameter,  and  *small”  is  under  10  meters.  Fire  intensity 
has  be«a  assessed  with  respect  to  consequences  of  fire  as  large,  medium,  or  small.  Interaction  of 
Are  with  fuselage  in  terms  of  fuselage  entry  and  of  effect  on  evacuation  also  have  been  assessed. 
Fire  entry  to  the  fuselage  has  been  gaged  as  entry  through  breaks  or  as  burii-through.  In  addition, 
the  effect  of  Are  on  the  postcrash  evacuation  has  been  assessed.  Here,  large  effects  implies  some 
Are  related  fatalities,  while  small  implies  some  hindrance. 
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maintenance  of  the  wing  ground  clearance  and  to  tranamiamon  of  loada  to  the  wing  structure  (only 
for  wing  pod  mounted  engines). 

WING  BOX  BREAKmACTURE 

In  67  accidents,  fuel  spillage  occurred  when  the  wing  box  fractured  due  to  excessive  forces  or 
loads.  There  are  also  nine  other  accidents  in  which  it  is  believed  that  wing  fracture  occurred  but 
insufHcient  detail  is  available  to  define  other  factors. 

Most  fractures  occur  due  to  high  vertical  loads  or  due  to  impact  with  large  objects  such  as  trees, 
buildings,  or  embankments.  In  some  cases  the  landing  gear  and  engines  may  also  collapse  or 
separate  at  the  time  wing  fracture  occurs,  however  the  gear  and  engine  generally  have  little 
influence  on  the  severity  of  the  accident  except  possibly  by  providing  an  ignition  source  for  the 
spilled  tank  fuel. 

Some  wing  fractures  occur  early  in  the  accident  sequence  and  the  fuselage  continues  to  slide  or 
move,  possibly  away  from  the  initial  large  fuel  spill  location.  Fuel  is  usually  scattered  over  a  large 
area.  In  other  cases  the  wing  fracture  occurs  at  about  the  time  and  point  where  the  aircraft  comes  to 
rest  and  the  fuel  spill  is  adjacent,  under,  or  around  the  fuselage.  If  fuel  ignition  occurs,  an  almost 
instantaneous  severe  fuel  fire  develops;  this  constitutes  the  “^ost  hazardous  scenario.”  Damage  to 
other  structural  components  can  influence  passenger/crew  survivability  in  this  situation.  Fuselage 
breaks  and  fuselage  lower  surface  ruptures  can  provide  immediate  access  for  flame  and  smoke  to 
the  passenger  compartment  Damage  to  the  cabin  interior  such  as  collapsed  overhead  storage, 
galley  debris,  ruptured  floor,  and  jammed/blocked  exits  can  impede  evacuation.  The  interactions  of 
these  structural  components  and  the  impact  that  each  has  on  survivability  in  the  wing  break/severe 
Are  occurrence,  is  different  for  each  occurrence,  no  two  are  the  same.  From  this  study  it  is 
concluded  that  research  should  be  accompliahed  in  the  area  of  wing  box  and  integral  tank  design 
philosophy  and  in  the  development  of  wing  structure  that  will  minimize  wing  tank  fracture  when  wing 
box  breakage  or  separation  occurs. 

Results  of  these  assessments  are  shown  in  figure  4.3.  Some  general  observations  may  be  made. 
First,  wing  breaks  result  in  a  high  percentage  of  flies  (deep  water  impact  being  an  understandable 
exception).  Second,  wing  break  accidents  have  a  high  fire  related  lethality.  Third,  if  Are  is  present  it  is 
hi^y  probable  that  Are  will  enter  the  fuselage  either  through  a  fusdage  opening  such  as  a  door, 
break,  or  by  a  bum-through.  Fourth,  the  presence  of  Are  has  a  serious  effect  on  the  postcrash 
evacuation.  Breaks  due  to  impact  in  deep  water  have  not  experienced  Ares  although  hazard  of  Are  is 
present.  Breaks  due  to  dragging  the  wing  across  the  ground  appear  to  result  in  a  lower  percentage 
of  fatal  accidents  than  other  types  of  breaks. 

Wing  breaks  due  to  impacting  treea/poles  and  like  obstructions  are  particularly  severe  types  of 
breaks  with  regard  to  size  of  the  spill  and  resulting  Are  and  incidence  of  Are  related  fatalities.  For 
21  accidents,  large  spills  udcurred  in  at  least  16  with  Ares  occurring  in  at  least  15.  Fire  related 
fatalities  did  not  occtir  in  only  seven  accidents.  It  may  also  be  seen  that  Are  entry  through  fuselage 
breaks  occmned  in  almost  60%  of  the  accidents  while  entry  by  bum-through  occurred  in  about 
10%  of  the  accidents.  Fire  was  a  factor  in  evscuation  in  about  30%  of  the  accidents.  For  this  type 
of  break,  interaction  with  landing  gear  and  with  engine/pylon  separation  appears  quite  small  as 
might  be  expected. 

Similar  assessments  may  be  made  for  other  causes  of  wing  break  with  similar  results.  An  exception 
IS  the  effect  on  gear  separation  and  engine/pylon  separation  for  the  ground  drag  break.  Here  the 
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Figure  4.3  -  Wing  Break  Assessment  (Continued) 
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Figure  4.3~Wing  Break  Assessment  (Concluded) 


crash  role  of  gear  and  wing/pylon  mounted  engines  in  maintaining  ground  clearance  of  the  wing  does 
appear  to  be  a  signiHcant  factor.  If  a  gear  more  tolerimt  to  separation  or  collapse  were  available, 
some  improvement  in  crashworthiness  might  hi-  schieved. 

WING  LOWER  SURFACE  TEARmUPTURE 

In  this  study,  tear  or  rupture  of  the  wing  lower  surface  is  known  to  have  occurred  in  eight  accidents 
and  probably  occurred  in  19  others.  These  generally  occur  when  the  wing  is  subjected  to 
scrubbing/sliding  on  tl.>3  runway,  on  rough  terrains,  or  over  various  objects.  Records  indicate  that  13 
involved  contact  with  rough  terrain,  7  involved  sliding  over  fences  and  walls,  4  involved  sliding  on 
level  ground,  1  involved  settling  on  a  separated  engine,  and  1  involved  impact  with  another  aircraft. 
In  26  of  these  accidents  the  aircraft  was  destroyed  and  40%  had  fire  related  fatalities. 

The  hazard  evolving  from  these  wing  tank  tear/ruptures  is  related  to  the  size  of  the  tank  opening,  the 
rate  at  which  fuel  is  released,  the  temperature,  and  if  ^he  fuel  was  ignited.  Many  of  these 
occurrences  involve  severe  fires,  however  they  tend  to  be  localized  in  the  wing  area  and  thereby 
make  it  possible  for  persons  onboard  to  evacuate  from  both  ends  of  the  fuselage  away  from  the  fire. 
The  interactions  and  impact  that  other  structural  components  have  on  these  wing  lower  surface  tears 
is  the  same  as  with  wing  break  occurrences.  An  increase  in  the  hazard  occurs  with  time  (possibly  30 
seconds  to  5  minutes);  fire  impacting  on  the  wing  often  causes  tank  explosions  that  spread  the  fuel 
further  and  intensify  the  fire.  Research  should  be  directed  in  the  area  of  containing  the  fuel  within  the 
tank  or  at  least  restricting  the  fiow  of  fuel  through  the  rupture  or  hole  in  the  wing  skin. 

Assessment  of  these  accidents  is  shown  in  figure  4.4.  As  may  be  seen,  lower  surface  tear  results  in 
large  fuel  spillage  with  the  fire  being  severe.  In  about  60%  of  the  spills,  fire  enters  the  fuselage  by 
burning  through  the  skin,  while  fire  entry  through  fuselage  breaks  occurs  in  15%  and  by  other 
routes  in  about  10%.  Fire  has  affected  evacuation  in  40%  of  the  cases. 

With  regard  to  the  interaction  of  landing  gear  collapse  or  separation,  gear  has  been  a  major  factor  in 
50%  of  the  spills  and  had  a  lesser  effect  in  about  30%  of  the  spills.  Wing  mounted  engine/pylon 
separation  or  collapse  during  lower  surface  tear  failed  to  maintain  ground  clearance  in  95%  of  the 
cases. 

Wing  l^z  Tear 

Tearing  away  sections  or  parts  of  the  wing  box  fuel  tank  and  subsequently  releasing  large  quantities 
of  fuel  during  separations  of  main  landing  gear  or  of  engine  pylon  is  an  infrequent  occurrence,  being 
reported  in  seven  accidents.  However,  when  it  does  happen,  a  severe  fuel  fire  generally  occurs. 
Design  philosophy  for  main  landing  gear  and  engine  pylon  attachment  to, the  wing  box  should  be 
reviewed  to  ensure  these  units  are  fused  for  a  clean  overload  separation  that  does  not  fracture  the 
integral  fuel  tank.  Assessment  of  wing  box  tear  is  shown  in  figure  4.5. 

Tank  Ullage  Explosions 

Wing  box  fuel  tank  ullage  explosions  have  been  reported  in  17  accidents  and  probably  occurred  in  6 
others.  In  most  of  these,  a  severe  fire  already  existed  and  generally  the  size  or  intensity  of  the  fire 
increased.  In  most  cases  it  is  not  known  how  many,  if  any,  additional  fatalities  resulted  from  the  tank 
explosions  but  it  appears  from  available  data  that  evacuation  was  usually  affected.  'Fhe  initial  fire  in 
three  accidents  occurred  at  the  engine  pylon  wing  interface  after  engine  separation,  two  of  these 
explosions  occurring  in  flight.  Research  should  be  directed  towards  development  of  devices, 
systems  or  procedures  that  will  eliminate  or  reduce  the  probability  of  ullage  explosions.  However, 
reliability  of  the  fuel  delivery  syst^  must  not  be  compromised  or  reduced  to  achieve  the  elimination 
of  ullage  explosions.  Assessment  of  tank  ullage  explosions  is  shown  in  figure  4.6. 
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Figure  4.6~Vliage  Explosion 


Wing  Tank  Venta 


The  wing  tank  vent  system  has  been  involved  in  one  severe  Hre  accident.  In  this  case,  a  707  in 
Rome,  an  engine  Are  spread  to  fuel  dripping  from  the  adjacent  wing  tank  vent  at  the  wing  tip, 
progressed  throygh  the  vent  system  and  caused  a  tank  ullage  explosion.  Any  studies  involving  fuel 
tank  design  should  include  the  taiik  vent  system  and  flame  suppression. 

Tank  Puncture 

There  are  three  accidents  in  which  tanks  have  been  punctured  by  foreign  objects.  Two  of  these 
accidents  occurred  during  aircraft  operation  and  resulted  in  fures  that  destroyed  the  aircra  ft  but  for 
which  there  were  no  fatalities.  One  of  these  involved  puncture  by  debris  from  a  disintegrating  engine 
and  the  other  involved  jjarta  from  a  disintegrating  wheel.  The  third  incident  occurred  afuur  the 
accident  when  the  tank  was  punctured  during  rescue  operations  but  there  was  no  fire. 

Leakage 

There  are  four  accidents  in  which  fuel  spillage  resulted  from  leaking  tanks.  Only  one  accident 
experient^  fire  which  destroyed  the  aircraft,  but  there  were  no  fatalities.  While  fire  hazard  is 
present  these  accidents  have  not  been  lethal. 

Body  Line* 

Rupture  of  body  fuel  lines  is  a  hazard  associated  with  aircraft  con^gurations  having  aft  mounted 
engines  or  auxiliary  power  unit.  If  fuel  tank  shutoff  valves  are  activated  immediately  after  a  crash,  the 
amount  of  fuel  spilled  due  to  body  line  ruptture  is  only  a  minw  contributor  to  the  accident  severity. 
However,  when  the  lines  are  not  shut  off,  the  reaulting  Hre  has  been  catastrophic. 

The  •claaaic*  case  of  this  was  the  727  Salt  Lake  City  accident  on  November  11, 1965,  in  which  a 
separated  landing  gear  penetrated  the  lower  fuselage  and  ruptured  a  body  fuel  line.  Forty-three 
occupants  died  from  Are  related  cause*.  As  a  result  of  this  accident  body  lines  were  strengthened 
and  rerouted  to  avoid  this  type  of  rapture.  The  only  other  instance  in  which  body  lines  are  thought  to 
be  a  major  contributor  to  the  severity  of  an  accident  is  the  DC9  O’Hare  on  December  20,  1972, 
where  the  aft  fuselage  of  a  DG9  struck  the  verticai  tail  of  an  880  during  take-off  and  probably 
ruptured  a  body  fuel  line.  Ten  persons  perished  from  Are  related  causes  in  this  accident. 

Aaaeaament  of  body  fuel  line  rapture  ia  given  in  Agure  4.7.  As  may  be  seen,  there  are  10  accidents 
with  4  probaUe  instances  of  rapture.  Fire  was  present  in  each  instanpe  with  Are  related  fatalities  in 
nine  accidents.  Fuel  line  rapture  fires  are  deemed  to  have  been  a  factor  in  evacuation.in  possibly  six 
of  the  cases.  Fuselage  breaks  were  present  in  eight  of  the  cases  with  Are  entering  the  fuselage 
through  the  breaks  in  six  cases.  Fire  came  through  the  floor  in  three  caaee  with  one  uncertain. 

SEATS 

Seats  interface  with  the  occupant  and  with  the  structure  to  which  they  are  attached.  In  aaaeaaing 
these  interactione,  the  rebtion  of  the  seats  and  the  atrocture  w  treated  Arst,  and  the  relation  of  the 
seat  to  occupant  ia  treated  second. 

Three  basic  types  of  seats  are  of  concern:  crew  seats,  flight  attendant  jump  seats,  and  the 
passenger  double  and  triple  bench  seats.  Crew  seatt  are  single  seats  that  are  mechanically 
adjustable  to  facilitate  operation  of  the  aircraft  and  attach  to  the  cockpit  Aoor  structure.  A 
combination  shoulder  and  lap  belt  restrain  the  occupant  Flight  attendants'  jump  seats  may  be 
single  or  double  units  attached  to  a  bulkhead  end  mechanically  folded  or  retracted  when  not  in  use. 
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Figure  4.7- Body  Line  Rupture 


These  seats  support  vertical  loads,  with  the  restraint  harness  transmitting  aide  and  longitudinal 
loads  to  the  structure.  Passenger  seats  are  attached  to  floor  tracks  and  in  some  designs  to  the 
fuselage  sides.  Floor  tracks  are  attached  to  the  floor  structure  or  to  pallets  attached  to  the  floor 
8truct\ire.  The  passenger  is  restrained  by  means  of  a  lap  belt. 

For  the  interaction  of  seats  with  structure,  no  distinction  is  made  for  fypes  of  seats,  but  two 
interactions  are  of  concern  with  the  structure  —  the  effect  of  a  fuselage  break  and  the  distortion  of 
the  floor.  In  a  fuselage  break,  seats  may  be  ejected  through  the  break,  or  may  simply  sepa^te  from 
a  broken  floor  track.  In  floor  distortion,  seats  may  separate  from  the  track,  or  may  be  elevated. 

The  potentially  most  lethal  of  these  interactions  is  ejection  through  the  fuselage  break.  Survival  of 
the  occupant  is  a  matter  of  chance,  depending  on  many  factors  such  as  velocity  of  ejection,  nature 
of  impact  area,  and  the  orientation  of  the  occupant  at  impact  Further,  the  ejected  occupant  may 
be  in  an  area  that  is  exposed  to  fire  or  is  overrun  by  the  advancing  aircraft. 

Seats  located  is  the  vicinity  of  a  fuselage  break  may  be  suited  to  high  acceleration  pulses  due  to 
the  redistribution  of  the  stored  strain  energy  as  the  structure  breaks.  This  frequently  results  in  the 
separation  oi  the  s^ts  due  to  rupture  of  seat  tracks,  seat  track  attachments  or  seat  structure. 
Separated  seats  may  then  shift  position  and  cause  injury  or  hinder  the  egress  of  the  occupant. 

Seat  dislocatiob  from  floor  distortion  may  be  due  to  separation  or  to  elevation  of  the  seat. 
Separation  may  force  the  occupant  to  contact  interior  objects  and  may  hinder  egress.  Floor 
elevation  may  block  egress  routes  such  as  over-wing  escape  hatches,  may  hinder  the  occupant  in 
exiting  from  the  seat,  or  may  force  contact  with  the  cabin  interior.  For  crashworthiness,  it  is 
desirable  to  keep  seats  attached,  in  place,  and  to  maintain  a  survivable  volume  for  the  occupant. 

There  are  48  accidents  with  identified  interactions  and  another  21  accidents  to  which  probable 
interactions  were  assigned.  Assessment  of  these  accidents  is  shown  in  Hgure  4.8.  Fuselage  break 
has  resulted  in  15  certain  accidents  with  one  or  more  occupant  ejected  through  the  break,  and 
ptuoably  at  least  two  more.  Separation  of  some  seats  at  the  break  with  the  seats  remaining  in  the 
aircraft  has  occurred  in  30  accidents  with  probable  occurrence  in  at  least  13  other  cases.  Seat 
separation  due  to  floor  or  fuselage  side  distortion  has  occurred  in  19  accidents  with  probably  5  other 
cases.  Elevation  of  the  seat  without  separation  has  occurred  in  14  accidents  with  probably  4  other 
accidents. 

The  discussion  of  seat/restraint, performance  in  survivable  crashes  is  presented  in  two  parts:  The 
first  part  includes  those  accidents  in  which  injuries  that  might  be  related  to  seat  strength 
performance  and  in  which  seat/ieotraint  performance  are  cited  by  the  accidentinvestigation  team. 
The  second  part  includes  serioui  accidents  in  which  the  seaUrestraint  performance  was  not  cited 
and  in  which  no  injuries  that  niight  be  related  to  seat  strength  occunr^. 

Only  31  such  accidents  could  be  found  in  which  seat  performance  was  mentioned  in  NTSB  reports. 
A  detailed  review  of  these  acddlents  indicates  seats  certiHed  to  current  FAR  seat  strength  criteria 
provide  protection  to  the  oocup^t  commensurate  with  the  crash  loads.  The  aircraft  strength  and 
occupant  injury  tolerance  capaihlity  appear  to  be  in  proper  balance. 

A  separate  independent  Study  o '  this  matter  conducted  within  the  F  AA  is  contained  in  reference  1 . 

The  current  study  drew  upon  NTSB  accident  reports  and  special  studies,  NTSB  Human  Factors 
Factual  Reports,  NTSB  Public  Hearing  Dockets,  and  the  manufacturers  accident  files  for  each 
accident  The  separate  FAA  stud;^  also  treats  NTSB  data,  and  includes  FAA  Civil  Air  Medical  Institute 
(CAMI)  data  but  does  not  inclujde  the  manufacturers  files. 
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For  engineoring  purpoees  it  is  necessary  to  relate  seat  performance  and  injury.  To  do  this  it  was 
uecessary  to  review  the  Human  Factors  Factual  Reports  and,  in  some  instances,  survivor  testimony. 
The  NTSB  statistical  category,  “Serious  Injury*  (see  app.  A),  used  in  NTSB  Accident  Reports  does 
not  necessarily  identify  actual  physical  injury  nor  relate  injury  mechanism  to  injury.  Accident  victims 
who  are  hospitalized  for  48  hours  for  medical  obser  vation,  legal  considerations,  or  other  reasons  are 
listed  as  serious  injuries  even  if  there  is  no  treatment.  An  immediate  improvement  in  crashworthiness 
statistics  could  be  obtained  simply  by  using  a  more  accurate  definition  of  serious  injury.  To  rely  on 
these  injury  statistics  may  lead  to  exaggerated  conditions  and  produce  erroneous  conclusions. 

Reference  1  identifies  27  ground  impact  accidents  including  7  propdler-driven  aircraft  and  20  jet 
transport  aircraft.  A  comparison  of  those  study  accidents  with  this  study  shows  that  18  of  20  jet 
transport  accidents  are  included  in  the  present  study.  The  two  acddeots  omitted  are  the  DC-8  JFK 
accident  on  September  15,  1970,  in  which  the  seats  performed  adequately  and  no  occupant  was 
actually  seriously  injured,  and  the  707  Pago  Pago  accident  on  January  30, 1974  in  which  no  seat 
performance  was  cited.  The  additional  accidents  in  the  present  study  include  accidents  prior  to 
1970,  two  Canadian  accidents,  and  the  747  Japan  Airlines  accident  in  Anchorage  on  December  16, 
1975. 

In  these  accident  reviews,  investigators  did  not  identify  a  single  trauma  fatality  caused  by  lack  of 
seat  strength  or  seat  attachment  structure  strength.  It  is  recognized  that  su<±  identification  is 
difHcult  because  of  incomplete  knowledge  of  local  crash  dynamics,  fatal  injury  mechanisms,  and 
survivor  testimony  as  to  his  experience.  Also,  postcrash  fire  frequently  consumes  necessary 
evidence.  There  are  limited,  though  subjective,  indications  where  an  inrremip  in  attachment 
strength  may  have  provided  some  benefit.  For  instance,  one  passenger  in  the  727  St.  Thomas 
accident  was  ejected  in  his  seat  through  a  fuselage  break  and  died  of  trauma  injuries.  This  seat  was 
located  in  the  aircraft  in  the  region  of  fuselage  destruction  and  there  is  no  assurance  that  any 
increase  in  seat  strength  requirements  would  have  provided  any  beneBt. 

While  it  can  be  observed  that  injuries  were  sustained  in  deforming  the  seats,  no  sequence  of  events 
has  been  identified  where  increased  seat  strength  would  have  reduced  occupant  injury. 
Con;^uently,  the  cases  presented  in  table  4.6  involve  serious  injury  and/or  seat/restraint  system 
crash  performance  for  accident  survivors.  Twenty-six  acddrats  involve  a  hull  loss,  19  involve  fire, 
22  involve  at  least  one  fuselage  break,  14  involve  severe  floor  distortion,  Snd  4  involve  water  impact 
Thirteen  accidents  are  only  partially  impact  survivable  since  survivable  volume  for  at  least  one 
occupant  was  lost  For  seat/restraint  system  strength  performance,  injuries  to  the  head,  spine, 
chest  and  pelvis  are  of  concern,  although  injuries  of  these  types  may  arise  from  a  variety  of  other 
causes.  These  are  shown  for  the  flight  deck  crew  and  passengers,  while  spine  and  pelvis  injuries  are 
shown  for  flight  attendants. 

Table  4.6  also  shows  seat  performance  for  seat-to-floor  attachments,  seat  legs,  seat  pan,  and 
restraints  for  flight  deck  crew  and  passenger  seats.  The  number  for  attachments  and  seat  legs  are 
for  seat  units.  Flight  attendants’  jump  seat  structuins,  mechanisms,  and  harnesses  are  also 
identified. 

Some  general  observations  may.  be  made  in  reviewing  these  acddmts.  First,  there  is  evidence  of 
spinal  injury  for  flight  deck  crew,  flight  attendants,  and  passengers  where  no  seat  crash  performance 
was  cited  by  the  NTSB.  In  addition,  there  were  spinal  injuries  to  occupants  where  seat  crash 
peformance  was  dted.  If  the  injury  tolerance  of  these  people  is  exceeded  by  the  crash  forces 
transmitted  by  seats  designed  to  current  strength  requirements,  increasing  the  seat  strength  criteria 
would  do  nothing  to  improve  their  protection.  Second  there  are  instances  where  seat  performance 
was  cited  in  which  no  serious  injury  was  incurred  suggesting  that  increasing  seat  strength  might 
transmit  sufficient  load  to  produce  serious  injury,  a  negative  benefit. 


Table  4.G-Cases  Involving  Injury  Only 
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Seat  detachment  (separation)  is  generally  associated  with  loss  of  structural  integrity  due  to 
destruction  of  the  fuselage  sheU,  fuaelage  breaks,  and  to  extreme  distortion  uf  the  structure. 
Detachment  may  occur  if  all  the  seat  legs  or  attachment  fittings  rupture  or  if  the  seat  tracks  rupture. 
This  indicates  that  a.  more  compliant  seat/floor  substructure  to  accommodate  distortion  might  be 
more  beneficial  than  an  increase  in  seat  strength  criteria. 

For  commercial  jet  transport  aircraft,  there  is  little  evidence  of  seat  separation  with  subsequent 
“stacking”  in  the  forward  section  of  the  aircraft.  Two  exceptiima  to  this  are  the  DC-9  St  Croix 
accident  where  three  double  seats  stacked  due  to  the  impact  of  some  passengers  who  did  not  use 
their  lap  belts;  and  the  737  Midway  accident  where  two  triple  seate  (rows  14  and  15  A,  B,  and  (]) 
stacked  due  to  severe  structural  damage  to  fuselage  in  that  area.  The  more  severe  injuries  occur  in 
the  vicinity  of  fuselagt:  breaks  and  areas  of  extreme  fuselage  distortion.  This  might  be  expected 
since  these  are  locationa  of  very  high  loadings  and  areas  where  structure  has  lost  its  ability  tc  protect 
the  occupants. 

PasMnger  Seats 

In  those  accidents  involving  high  longitudinal  loading  such  as  the  727  Cincinnati,' 737  Midway, 
LrlOll  Miami,  D&-9  Boston,  DC-9  Charlotte,  727  JFK,  727  St  Thomas,  DC-9  New  Hope,  737 
Cranbrook,  and  the  DC-8  in  Portland,  extreme  destruction  of  the  fuaelage  was  experienced. 
Passenger  seat  separation  was  observed  in  the  areas  of  destruction.  An  increase  in  seat  strength 
criteria  would  not  have  reduced  the  injuries  in  these  accidents. 

Examination  of  those  accidents  involving  extreme  vertical  impact  vdodties  such  as  the  DC-9  St. 
Croix,  DC-8  JFK,  DC-9  Akron,  727  Denver,  DC-9  Philadelphia,  and  the  DC-9  Toronto  accidents 
indicates  an  increased  number  of  spinal  fractures  as  compart  to  the  total  data  set  In  the  Toronto 
accident,  the  aircraft  went  over  a  51-ft  cliff  at  46  KIAS,  equivalent  to  falling  from  the  top  of  a  five- 
story  building,  having  a  resultant  deceleration  of  25  g.  At  Akron,  the  aircraft  flew  over  a  38-ft, 
embankment  at  86  mph  impacting  on  a  roadway.  The  Philaddphia,  Denver,  JFK,  and  St.  Croix 
accidents  had  hard  impacts  combined  with  high  forward  speeds. 

These  accidents  indicate  that  the  current  passenger  seat  vertkal  strength  criteria  are  closely 
matched  to  the  threshold  of  injury  for  the  passenger  population.  Further  seat  deformations  observed 
in  some  of  these  extreme  accidents  used  much  of  the  available  stroke  indicating  that  the  limit  of 
energy  absorption  within  the  injury  load  threshold  is  being  approached.  However,  further  research 
on  the  energy  absorption  aspect  of  crashworthy  seats  should  oe  done. 

The  D<3-8  Anchorage  accident  was  an  overrun  during  an  aborted  takeoff  in  which  the  aircraft 
encountered  a  deep  ditch  and  hit  a  building  and  an  antenna  tower.  The  aircraft  lost  engines,  landing 
gear,  wings  were  separated  and  broken  and  the  fusela^^  bnd»  open.  Many  of  the  occupants  left 
thei'seats  and  were  standing  in  the  aiales  before  the  aircraft  cane  to  rest  Twraty-one  spin^  injuries 
occurred.  One  flight  attendant  and  approximately  five  passengers  are  known  to  have  sustained 
spinal  injuries  due  to  impact  loadings.  These  flve  passengers  were  in  seats  that  ejected  from  the 
aircraft  when  the  fuselage  broke.  The  remainder  also  may  have  occurred  during  impact  or  dining 
evacuation,  but  there  is  no  implication  that  increased  seat  ittength  would  have  provided  more 
protection. 

It  may  be  seed  that  only  four  accidents  are  of  concern  in  acddnit  performance  of  the  flight  deck 
seats.  In  the  DC-8  Portland  accident,  the  right  side  of  the  cockpit  experienced  loss  of  survivable 
volume  due  to  impacting  a  large  diameter  tree  (of  the  cockpit  occupants,  only  the  Captain  survived). 
The  First  and  Serond  Officer’s  seats  separated  while  the  Captain’s  seat  was  attached  but  was  loose 
and  had  some  seat  pan  deformation. 


In  the  DC-9  Philadelphia  accident  where  the  aircraft  experienced  a  10  g  vertical  deceleration,  the 
Captain  and  First  Officer  seats  experienced  seat  pan  deformation.  In  applying  loads  to  deform  these 
seat  pans  both  occupants  experienced  spinal  injury. 


In  the  707  Kansas  City  accident  one  flight  deck  seat  experienced  seat  leg  deformation  and  the 
officer  received  a  spinal  injury.  However,  in  this  instance,  it  was  noted  that  the  harnesses  were  not 
used  by  the  the  occupants. 

There  are  six  other  accidents  in  which  spinal  injuries  occurred  to  flight  deck  crew  but  for  which  there 
was  no  seat  performance  cited.  From  this  it  may  be  concluded  that  seats  are  already  stronger  than 
pilots;  and  that  further  increasing  the  strength  criteria  for  these  seats  would  provide  no  benefit  and 
might  cause  more  severe  injuries.  It  appears  that  some  increase  in  energy  absorption  and  load 
limiting  might  prove  beneficial. 

There  are  eight  accidents  in  which  flight  attendants  spffered  spinal  injuries  while  seated.  In  the  DT 
Anchorage  accident,  one  injury  occurred  when  the  seat  retracted  from  under  the  attendant  d'.ir’tig 
upward  acceleration  causing  the  attendant  to  fall  to  the  floor.  The  remaining  injuries  occurred  with 
the  flight  attendants  in  the  seat.  Two  flight  attendants  had  spinal  and  pelvic  injuries  ir.  the  high 
longitudinal  deceleration  727  JFK  accident  on  June  24, 1975,  even  though  there  was  no  damage  to 
the  seat'restraint  system.  Most  of  these  citations  involve  instances  of  seat  collapse  or  partial 
collapse  due  to  rupture  of  a  hinge,  seat  attachment  fitting,  or  of  the  supporting  mechanism.  The 
injuries  sustained  did  not  cause  loss  of  mobility  in  most  cases. 

There  are  instances  where  seat  deformation  contributed  to  harness  problems,  in  that  the  flight 
attendant  submarined  after  the  seat  pan  deformed.  The  727  Denver  accident  on  August  1, 1975  is 
a  case  in  point.  The  flight  attendant  suffered  a  back  injury  in  this  process.  Also  “some*  spinal  and 
pelvic  injuries  were  experienced  in  the  L-1011  Miami  accident.  Most  of  the  remainder  of  spinal 
injuries  occurred  in  hard  vertical  impact  accidents  with  seat  pan  or  mechanism  citations.  Also  there 
are  instances  of  seat  deformation  in  which  there  were  no  injuries. 


A  review  of  accidents  involving  flight  attendant  seats  indicates  that  increasing  seat  strength 
would  not  reduce  the  number  of  serious  injuries.  H<r.vever,  every  effort  should  be  made  to  include 
the  results  of  TARC  Project  216-10  study  into  flight  attendant  restraint  design.  Various 
government  agencies  such  as  the  Army,  Air  Force,  and  the  Department  of  Transportation  have 
identified  some  levels  of  injury  tolerance.  See  part  of  section  5.0  titled.  Human  Impact  Tolerance 
for  a  more  detailed  discussion. 


)INGGEAR 

Thlere  are  96  accidents  in  which  one  or  more  of  the  landing  gear  separated  or  collapsed.  In  addition 
thire  are  16  accidents  in  which  the  gear  was  stowed  or  retracted.  The.  effect  of  gear  separation  or 
colmpae  will  be  considered,  followed  by  the  effect  of  gear  in  stowed  positions.  Some  comparison  of 
the  two  effects  will  be  made. 

Referring  to  table  4.2,  the  total  occurrences  show  that  for  95  cases  of  gear  involvement  (1  accident 
involves  debris  from  the  gear  damaging  the  aircraft)  there  were  80  hull  losses.  64  fires,  71  tank 
rujitures,  46  wing  mounted  engines/pods  separated  (11  cares  of  engine  separation  involve  aft 
m(  unted  engines),  62  fuselage  breaks  or  crush,  38  door  hatch  involvements,  33  floor  distortions, 
33  cases  of  debris,  and  26  seat  citations. 


In  order  to  assess  the  role  of  landing  gear  and  the  interaction  with  other  structural  systems  the 
accidents  were  reviewed.  Direct  effects  of  gear  separation  are:  separation  of  wing  pod  mounted 
enipnes;  rupture  of  fuel  tanka  by  failing  to  maintain  ground  clearance  and  by  the  separating  gear 


tearing  a  wing  box;  and  damage  to  the  lower  fuaelage  by  cruahing.  friction,  and  by  breaks. 
Secondary  effects  are  Are  due  to  fuel  spillage  from  ruptured  fuel  lines  and  tanks  and  to  friction,  floor 
distortions,  door/hatch  problems,  seat  separation,  and  debris  due  to  the  distortion  and  breaks  of  the 
fuselage  as  a  result  of  ground  contact. 

Figure  4.9  shows  the  assessment  of  gear  separation.  In  67%  of  the  accidents  all  gear  separated  or 
collapsed,  while  in  22%  only  main  gear  separated  or  collapsed,  and  in  9%  only  nose  gear  separated  or 
collapsed  and  in  2%  nose  gear  and  one  main  gear  separated  or  collapsed. 

Gear  separation  or  collapse  was  involved  in  tank  rupture  in  17  cases  of  lower  surface  tear,  12  cases 
of  wing  drag  breaks,  14  cases  of  wing  box  tear,  and  4  cases  of  tank  leakage.  This  fuel  spillage 
resulted  in  42  Area  Thus  gear  separation  or  collapse  is  a  factor  in  64%  of  the  fires  that  occurred  when 
gear  participated  in  the  accident.  Using  small,  medium,  and  large  as  the  degree  of  involvement,  the 
gear  was  a  large  factor  in  26  of  the  42  fires,  a  medium  factor  in  4  of  the  Ares,  and  a  small  factor  in 
12.  With  respect  to  fatalities,  there  were  28  accidents  with  Are  related  fatalities  and  24  accidents 
with  trauma  deaths. 

I^ower  fuselage  crush  occurred  in  53  accidents  witii  gear  separation  being  a  large  factor  in  37 
cases.  Lower  fuselage  crush  has  a  secondary  effect  on  door/hatch  jamming,  on  separation  of  seats, 
and  on  cabin  interior  debris.  Gear  separation  was  a  large  factor  in  9  cases  of  fuselage  break. 

For  15  accidents  in  which  the  gear  was  known  to  be  retracting  or  in  stowed  position,  there  are  only  5 
cases  where  having  gear  extended  may  have  prevented  the  crash.  These  cases  mostly  involve 
extensive  slide-out,  but  occurred  during  aborted  takeoffs  or  flight  activities  for  which  the  gear  is 
normally  retracted. 

From  the  above  discussion  it  may  be  concluded  that  development  of  gear  more  tolerant  to  conditions 
that  cause  separation  would  result  in  some  increase  in  crashworthiness.  Further,  when  separation 
does  occur,  the  wing  box  should  not  tear  open. 

CABIN  INTERIORS 

Cabin  interiors  are  cited  in  approximately  one-third  of  the  accidents  in  the  data  base.  Cabin  interior 
equipment  includes  overhead  storage  compartments,  ceiling  panels  and  lights,  sidewalls,  class 
partitions,  galleys,  and  closets.  Comparing  cabin  interior  citations  with  the  accident  severity  category 
(see  table  4.4)  som^  peculiarities  may  be  observed.  For  instance,  it  might  be  expected  that 
accidents  in  categories  3  to  6  would  have  a  higher  percentage  of  citations  than  is  actually  reported. 
This  is  particularly  applicable  to  accident  categories  5  and  6. 

The  disparity  might  be  attributed  to  the  expectations  of  the  investigator.  If  the  damage  is  such  that 
overhead  compartments,  ceiling  panels,  etc.  might  be  expected  to  sqrarate  and  clutter  the  scene, 
the  occurrence  may  not  be  reported.  Further,  if  the  devastation  is  such  that  participation  of  the  cabin 
interiors  as  compared  to  other  factors  might  be  considered  secondary  in  siurvivability  of  the 
occupant,  the  participation  may  be  unreported.  While  the  absolute  level  of  participation  may  equd 
that  of  a  leas  severe  accident,  the  relative  contribution  may  be  signiAcantly  less.  Finally,  post-impact 
Are  may  destroy  visual  evidence  and  survivors  may  not  report  conditions. 

Consequently,  the  46  accidents  where  citations  have  been  made  should  serve  as  an  indication  of 
possible  crash  behavior  of  interior  equipment.  The  23  accidents  where  probable  participation  has 
been  assessed  may  not  include  all  incidents.  In  some  accidents  where  at  least  one  part  of  the 
interior  participated,  other  parts  have  been  deemed  probable. 


Number  of  accidents 


>-  Gear  Separation 


Overhead  storage  compartments  have  been  assessed  with  regard  to  separation,  contents  spillage, 
evacuation  blockage,  and  injury  tc  occupants.  Ceiling  panels,  sidewall  liners,  and  class  partitions 
have  been  assessed  for  separation.  This  separation  usually  has  some  effect  on  egress.  Galleys  have 
been  assessed  for  contents  spillage  as  well  as  egress  blockage.  These  units  are  of  particular  concern 
since  they  affect  availability  of  the  service  doors  as  an  egress  route.  These  assessments  are  shown 
in  figure  4.10.  Cabin  interiors  have  been  a  major  factor  in  evacuation  in  12  known  accidents  and 
probably  in  14  accidents.  Overhead  storage  has  caused  injuries  in  five  known  accidents  and 
probably  caused  injury  in  three  additional  accidents. 

Figure  4.11  shows  interaction  between  other  structural  systems  and  the  cabin  interior  system. 
Crush  of  the  lower  fuselage  is  deemed  to  have  occurred  in  52  of  the  68  acddehts.  Fuselage  breaks 
are  deemed  to  have  occurred  in  32  of  the  68  accidents.  Tj>nding  gear  separation  or  collapse 
occurred  in  48  accidents  and  the,  gear  was  retracted  in  6  other  cases.  Floor  distortion  is  deemed  to 
have  occurred  in  26  accidents.  All  of  these  interactions  participate  in  severely  loading  the 
structural  supports  for  the  cabin  interior  equipment.  Fire  was  presmt  in  41  of  the  accidents. 

FUSELAGE  BREAK  ACCIDENTS  (Excluding  Fuselage  Lower  Surface  Rupture) 

Of  the  153  impact  survivable  accidents  used  in  this  Survivability  Study,  64  are  known  to  have 
experienced  one  or  more  breaks  in  the  fuselage  and  7  others  probably  also  had  breaks.  Forty-six  of 
the  64  were  fatal  accidents.  Available  data  indicates  that  39.5%  of  the  persons  onboard  in  the  64 
accidents  were  fatalities.  The  other  82  accidents  in  this  study  did  not  experience  fuselage  breaks 
and  27  of  these  were  fatal  accidents  of  the  persons  onboard  in  the  82  accidents,  20.6%  were 
fatalities.  These  data  are  plotted  os  follows: 


Fatalities 

Percent  of  total  onboard 


Of  the  64  accidents  experiencing  fuselage  breaks,  6  involved  the  aiicraft  touching  down  in  deep 
water  and  58  involved  the  aircraft  touching  down  (impacting)  on  ground  or  in  swampy  areas  with 
shallow  water.  Data  on  these  accidents  are  plotted  as  follows: 
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Deep  Water  Entry  Accidents; 

Six  water  entry  accidenta  in  which  the  fuselage  broke  into  several  pieces  had  fatalities  (36.8%  of 
those  persons  onboard  were  fatalides).  In  five  of  these  accidenta  one  section  of  the  fuselage  sank 
rapidly  —  some  of  the  passengers  and  crew  probably  were  ejected  or  fell  into  the  sea  without  benefit 
of  survival  gear  and  others  were  trapped  inside.  The  other  sections  floated  briefly,  allowing 
evacuations  into  rafts  or  floating  slides.  In  other  accidents  the  fuselage  sections  floated  briefly, 
however  84%  of  those  onboard  drowned.  Survivor  reports  indicated  that  in  at  least  two  accidents, 
interior  and  carry-on  debna  blocked  evacuation  routes  and  in  two  other  accidents  some  exit  doors 
were  jammed.  In  another,  the  passenger  compartment  floor  was  displaced  upward  restricting 
evacuation. 

There  were  also  four  accidents  involving  deep  water  entry  in  which  the  fuselage  did  not  break,  and 
25.9%  of  those  onboard  were  fatalities,  moat  believed  due  to  drowning. 

However,  in  these  accidenta  the  ainraft  floated  at  least  5  minutes  and  in  most  cases  10  to  20 
minutes,  thus  allowing  adequate  time  to  escape.  In  three  of  the  four  accidenta  it  was  esUblished  that 
the  onboard  rafts  and  float  slides  were  not  used. 

It  can  therefore  be  concluded  that  in  deep  water  entry  accidents  i;,  which  the  fuselage  does  not 
brtak,  the  survivor  rate  should  be  very  high  with  proper  crew  response/abtiona  using  available 
equipment  Designing  the  fuselage  to  resist  breaks  or  s:parations  is  desirable. 

Ground  Slide  Accidents 

Fifty-eight  ground  slide  accidents  experienced  fuselage  breaks  due  to  main  landing  gear 
aeparation/ooUapse.  excessively  hard  touchdown  or  hard  flat/impact  after  takeoff,  touchdown  in 
areas  of  trees/building/pbjects  or  on  rocky/rough  terrain,  or  combinations  of  these  conditions. 

Gear  Separations  —  8.6%—  In  5  accidents,  landing  gear  collapse  or  separation  is  believed  to  have 
ooQtributed  to  the  fuselage  breakinr,  that  is,  if  gear  had  not  failed  the  fuselage  may  not  have  broken. 


These  are  generally  cases  of  the  aircraft  veering  off  the  runway  onto  reasonably  smooth  terrain  or 
touching  down  on  smooth  terrain  and  then  having  one  or  both  main  landing  gear  separate  due  to 
impact  with  a  slightly  raised  road  or  small  ditch.  These  five  aoddenta  resulted  in  a  clean  break  in  the 
fuselage,  wide  enough  for  a  person  to  be  ejected,  fall  out,  or  step  out.  Approximately  11%  of  those 
onboard  in  the  five  accidents  were  fatalities.  Fatalities  occurred  in  three  of  these  accidents  and  in 
ecch  case  a  severe  fuel  fire  developed.  The  other  two  had  no  fatalities  and  no  fire. 

Hard  Touchdown  —  8.6%—  In  five  accidents,  the  aircraft  eqierienced  a  hard  touchdown  in  a 
landing  attitude  or  stalled  after  takeoff  resulting  in  level  attitude  impact  with  sufficient  vertical 
load  to  cause  the  fuselage  to  break.  Two  of  these  accidents  resulted  in  slight  breaks/fractures  that 
would  not  result  in  ejection  of  persona  or  provide  a  meaiu  of  exit/evacuation;  there  were  no 
fatalities  and  no  severe  fuel  fire.  The  other  three  acddents  resulted  in  fuselage  breaks  that  were 
wide  enough  to  allow  ejection  of  persons  or  provide  a  means  of  crawling,  stepping  out  during 
evacuaticn.  Of  the  45  persons  onboard  in  three  accidents  64%  were  fatalities;  all  three  experienced 
severe  fuel  fires.  There  is  a  high  probability  of  flame  and  smoke  entering  open  ends  of  the  fuselage 
sections. 

Aircraft  forward  speed  was  believed  to  be  reasonably  low  in  three  of  the  acddents  since  the  aircraft 
Were  in  a  stalled  condition  at  impact.  In  the  other  two  acddents  the  aircraft  touched  down  slightly 
short  of  the  runway  at  a  high  rate  of  descent,  with  forward  speed  probably  10  to  15  knots  less  than 
planned. 

Rough  Ground  —  8.2%  — In  48  accidents,  the  aircraft  experienced  fuselage  breaks  after  touching 
down  on  terrain  where  impact  occurred  with  trees,  poles,  guUeys,  ditches,  embankments,  raised 
roads,  etc.  or  where  impact  occurred  with  one  wing  low  on  a  reasonably  smooth  surface  (on  airport, 
marsh,  dry  lakebed,  etc). 

Uata  on  these  acddents  are  tabulated  in  the  following  chart. 
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1.  Twelve  accidents  involved  a  slight  bi«ak(3)  or  fracture  in  which  fuselage  sections  did  not 
separate  far  enough  for  a  person  to  he  ejected  or  for  a  person  to.  crawl  or  step  out  during 
evacuation  (class  1).  These  accidents  generally  occur  on  or  near  the  airport  and  as  a  result  of 
landing  overruns,  takeoff  abort,  or  veering  off  the  runway.  Impact  which  caused  the  fuselage 
break  usually  occurred  after  considerable  brake  action  plus  decelerations  off  the  r.mway. 
Only  two  of  the  accidents  (16.6%)  involved  a  severe  fuel  fire,  and  only  6.3%  of  the  persons 
onboard  in  these  12  accidents  were  fatalities. 

2.  Twenty  accidents  involved  a  clean,  wide  break  in  which  the  fuselage  section  remained 
basically  intact  but  separated  far  enough  for  a  person  to  be  ejected  or  to  crawl/step  out  (class 
2).  About  75%  of  these  accidents  involved  severe  fud  fires  and  29.4%  of  the  persons  onboard 
in  these  20  accidents  were  fatalities.  Approximately  half  of  these  accidents  involved  aircraft 
speed  at  or  near  impact  of  100  knots  or  more.  , 

3.  Sixteen  accidents  involved  considerable  destruction  of  the  fuselage  sections  and  in  most  cases 
the  sections  slid  or  traveled  many  feet  after  separation  (class  3).  During  this  movement 
persons  were  often  throwniejected  from  the  remains  of  the  fuselage  section.  In  some  cases 
ejected  persons  were  killed  from  trauma,  and  in  other  cases  the  ejected  persons  survived 
because  they  we^e  thrown  out  of  a  fire  or  bum  area.  About  93.8%  of  these  accidents  involve 
severe  fuel  firt  nd  77.8%  of  those  onboard  in  these  16  accidents  were  fatalities.  In  most 
cases  the  aircra.  speed  at  impact  was  well  over  1(X)  knots  —  two  of  these  had  an  impact 
speed  of  188  and  271  knots,  yet  some  persons  survived.  Many  accidents  in  this  group  can  be 
considered  to  be  only  marginally  survivable. 

It  can  be  concluded  that  the  probability  of  fatalities  in  accidents  resulting  in  fuselage  bieaks 
during  gmund  slides  is  closely  related  to  aircraft  speed  at  the  time  of  impact  that  breaks  the 
fuselage.  The  group  of  accidents  resulting  in  only  slight  breaks  (class  1)  had  an  average  aircraft 
impact  speed  of  57  knots  and  6.3%  of  those  on  board  were  fatalitir  ’.  The  group  resulting  in  a  clean 
(but  open)  break  (class  2)  had  an  average  speed  of  83  knots  and  29.4%  were  fatalities.  The  group 
resulting  in  a  torn  fuselage  (class  3)  had  an  average  speed  of  136  knots  and  77.8%  were  fatalities. 
The  greater  the  speed,  the  greater  the  fuselage  damage  and  the  greater  probability  of  fuel  tank 
rupture  causing  severe  fire.  However,  even  in  the  worst  cases,  some  persons  onboard  survived. 
D^gn  changes  that  would  result  in  a  stronger  fuselage  that  is  more  resistant  to  fragmentations 
should  provide  a  substantial  increase  in  survivability  for  those  onboard. 

FUSELAGE  LOWER  SURFACE  RUPTURE  (Excluding  Fuselage  Break  Accidents) 

Of  the  153  impact  survivable  accidents  in  this  study.  57  aircraft  are  known  to  have  experienced 
considerable  damage  to  the  lower  fuselage  and  little  or  no  damage  to  the  upper  fuselage  (above  the 
floor  line).  Seventeen  of  these  57  were  fatal  accidents,  with  17.5%  of  the  persons  onboard  being 
fatalities.  In  addition  to  the  accidents  noted  above,  there  are  seven  accidents  that  probably 
experienced  fuselage  lower  surface  damage;  three  of  these  were  fatal  accidents  with  45.8%  of  the 
persons  onboard  being  fatalities. 

Lower  surfacr  danuge  accidents  are  divided  into  three  groups  for  study  purposes:  extensive 
rupture,  minor  or  moderate  damage,  and  those  involving  water  entry.  Statistic^  data  on  these 
accidents  are  tabulated  oo  figure  4.12.  The  three  groups  are  discussed  as  follows; 

1.  Twenty-eight  accidents  experienced  .-xtensive  damage  and  rupture  of  the  fuselage  lower 
surface.  Eleven  of  these  were  fate’  accidents  with  27.7%  of  the  total  onboard  the  28  accidents . 
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Figure  4.12-Lower  Fuselage  Surface  Rupture  (Exclude  Fuselage  Breaks) 


being  fatalities.  A  severe  fire  occurred  in  15  of  the  accidents  and  9  of  these  were  the  fatal 
accidents.  Six  other  accidents  involved  a  minor  or  moderate  fire  with  no  fatalities. 

2.  Twenty-five  accidents  experienced  moderate  or  minor  damage  of  the  fuselage  lower  surface. 
Of  these  only  three  were  fatal  accidents,  with  1.5%  of  those  onboard  the  25  accidents  being 
fatalities. 

Six  of  these  accidents  involved  a  severe  fuel  fire,  four  involved  a  moderate  or  minor  fire,  and  six 
had  no  fire  reported.  Of  the  three  fatal  accidents,  two  had  severe  fires  and  one  a  moderate  fire. 

Six  accidents  involved  nose  gear  collapsing  aft  into  the  lower  fuselage.  One  resulted  in  a 
severe  fire  (friction  ignited)  which  destroyed  the  aircraft  and  one  resulted  in  a  moderate  fire 
(friction  ignited)  which  resulted  in  substantial  damage.  In  another  case  of  friction  fire,  the  aft 
fuselage  broke  and  was  dragged  on  the  runway. 

In  design,  the  prevention  of  friction  fires  is  treated  by  separation  of  flammable  materials  from 
the  proximity  of  friction  sparks  or  heated  structure.  In  operation,  rapid  action  by  the  airport  fire 
fighting  team  has  reduced  the  effect  of  the  friction  fire. 

3.  Four  accidents  involved  water  entry;  that  is,  touchdown  in  deep  water  or  rolling  into  deep  water 
at  high  speed  such  that  the  lower  surface  of  the  fuselage  was  torn  or  ruptured  but  the  fuselage 
did  not  break.  Three  of  these  four  accidents  resulted  in  extensive  lower  surface  damage  and 
the  aircraft  sank  rapidly.  All  three  were  fatal  accidents  with  18.1%  of  persons  onboard  being 
fatalities.  One  accident  resulted  in  moderate  damage  to  the  lower  surface  as  the  aircraft  rolled 
into  water  and  came  to  rest  on  its  gear  with  the  water  level  at  or  slightly  above  the  cabin  floor. 
There  were  no  fatalities.  These  accidents  were  also  discussed  before,  in  this  section,  under 
heading  “Deep  Water  Entry  Accidents.” 

Lower  fuselage  tear  or  rupture  generally  occur  when  landing  gear  fails  to  support  the  aircraft.  Thus, 
scrubbing  on  rough  surfaces  (sometimes  even  on  the  runway)  rips  open  the  thin  skins  and  body 
frames.  At  the  same  time,  wing  box  fuel  tanks  are  also  subject  to  rupture  and  fuel  spillage.  In  37  of 
53  ground  slide  accidents  the  wing  box  was  probably  ruptured  and,  of  these,  fire  occurred  in  32  — 
25  were  severe  fires  and  12  were  minor  or  moderate  fires. 

It  can  be  concluded  that  the  probability  of  fatalities  in  accidents  resulting  in  lower  fuselage  tear  or 
rupture  during  ground  slide  is  closely  related  to  the  occurrence  of  severe  fuel  fire.  Flame  and  smoke 
from  fuel  burning  on  the  ground  below  and  around  the  fuselage  have,  in  many  cases,  rapidly  entered 
the  passenger  area  via  openings  in  the  lower  fuselage.  If  openings  had  not  been  present,  the 
precious  minute  or  two  required  for  skin  burn-through  would  probably  be  adequate  for  evacuating 
most  or  all  persons  via  escape  routes  away  from  burn  areas.  Of  the  12  fatal  accidents  during  ground 
slide,  1 1  had  severe  fire  and  one  had  a  moderate  fire. 

FUSELAGE  FLOOR  DISPLACEMENT 

Displacement  and  rupture  of  the  passenger  floor  has  resulted  in  passenger  and  crew  injuries,  and 
has  restricted  movement  of  survivors  to  exits.  In  some  cases  the  upward  movement  of  th ;  floor  has 
resulted  in  the  jamming  of  doors  or  door  frames  and  in  other  cases  doors  could  not  be  opened  due  to 
floor  clebris  blocking  the  door.  Generally,  flcxir  surface  displacement  is  a  result  of  the  structural  floor 
beams  being  tom,  ruptured,  and  displaced  upwards  by  the  impact  forces  of  cargo,  cargo  containers, 
separated  landing  gear  or  ground  objects.  The  exception  to  this  is  floor  displacement  by  the 
hydraulic  action  of  water  when  the  aircraft  touches  down  in  water  or  rolls  into  water  at  high  speed  — 
in  these  cases  the  floor  beam  may  not  be  displaced  upward. 


Of  the  153  accidents  in  this  study,  36  are  known  or  reported  to  have  experienced  passenger  or 
crew  area  floor  displacement  or  rupture  and  probably  in  4  other  accidents.  Statistical  data  on  these 
occurrences  are  tabulated  in  figure  4.13.  For  study  purposes,  these  36  accidents  are  divided  into 
three  groups:  15  that  did  not  involve  a  fuselage  break,  17  that  did  involve  a  fuselage  break,  and  4 
that  involved  the  aircraft  touching  down  or  overrunning  into  water.  Th^  groups  are  discussed  as 
follows; 

1.  Of  the  15  accidents  which  did  not  have  fuselage  breaks,  8  involved  displacement  upwards  of 
the  cabin  floor  as  a  result  of  the  noee  gear  folding/collapaing  aft  into  the  lower  forward  fuselage 
cargo  compartment  or  electronic  compartment.  Displaced  cargo  or  electronic  equipment 
forced  the  floor  up  and  probably  tore  or  bent  the  floor  team.  In  four  of  these  accidents  the 
cockpit  door  was  j  ammed,  and  in  two  the  entrance  door  was  jammed  or  blocked.  None  of  these 
were  fatal  accidents,  however,  one  resulted  in  a  friction-ignited  fire  at  the  noee  gear  tires  which 
spread  and  destroyed  the  aircraft. 

Seven  other  accidents  involved  a  ground  slide  in  which  the  fuselage  lower  surface  was  tom  or 
crushed  upward  such  that  floor  and  floor  beams  were  displaced  upwards  in  localized  areas.  In 
one  of  these  a  nmin  landing  gear  assembly  rolledytumbled  under  the  fuselage  and  caused  much 
'  of  the  damage.  In  three  accidents,  an  entrance  door  was  jammed  or  blocked  by  the  floor. 
Passenger  seat  elevations  occurred  in  seven  accidents  which  contributed  to  passenger 
injuries.  In  three  accidents  passenger  seat  separations  occurred.  Accident  reports  in  these 
cases  did  not  mention  seat  separation  or  floor  displacement  as  interferring  with 
passenger  egress. 

2.  Seventeen  accidents  which  had  fuselage  breaks  also  had  areas  where  the  floor  was  displaced 
upwards.  These  accidents  tend  to  be  more  severe  than  those  without  fuselage  breaks.  If 
fuselage  aeparatioo  is  complete  and  wide  enough  for  human  and  seat  ejection,  the  impact  of 
passenger  floor  elevation  or  rupture  is  probably  aUghtly  minimized.  In  13  accidents  passenger 
scat  separation  was  reported,  in  9  accidents  seat  elevation  was  reported,  but  in  only  4 
accidents  was  passenger  egress  reported  to  have  been  impeded.  It  is  not  known  how  much 
impact  the  elevated  or  broken  floor  had  on  passenger  egress.  Passenger  entry  door  jam  was 
reported  in  five  accidents  and  crew  door  jam  in  two  accidents.  Cause  of  these  door  jams  in 

.  most  cases  could  not  be  established  with  any  certainty  but  was  probably  due  to  either  floor 
elevation/rupture  or  due  to  fuselage  teeak  if  the  break  was  adjacent  to  the  door. 

3.  Crew/paasenger  floor  elevation  and  rupture  occurred  in  four  accidents  which  involved  the 
aircraft  touching  down  m  deep  water  or  rolling  into  water  at  high  speed.  In  these  cases  the 
lower  fuselage  surface  was  tom  open  and  the  lower  (cargo)  area  filM  with  water.  Hydraulic 
action/'preasure  forced  the  floor  panel  upward,  causing  seat  separation  in  two  accidents  and 
seat  elevation  in  three  accidents.  Exit  doors  were  found  to  be  blocked  in  two  accidents. 

In  one  accident,  the  forward  closet  dislodged.  It  shifted  forward  in  such  a  way  that  the  forward 
entrance  door  was  partially  blocked  and  delayed  opening  of  the  door.  Also  a  section  of  floor 
came  up  and  provided  an  opening  in  which  two  of  the  crew  fell  into  the  lower  forward 
compartihent. 

In  another  accident,  nose  gear  separated  and  tumbled  aft.  forcing  up  and  rupturing  the  lower 
fuse.lage.  Floor  teams  and  floor  panels  were  elevated  causing  passenger  seats  to  tilt 
backwards  and  block  emergency  exits  on  both  aides  of  the  fuselage. 

Available  accident  data  provides  evidence  that  displacement,  elevation,  or  dislodging  of  the 
paasenger/cockpit  floor  system  in  localized  areas  has  resulted  in  passenger  and  crew  injuries  and 


has,  in  varying  degrees,  interferred  with  or  delayed  the  evacnati<m  of  passenger  and  crew. 
However,  accident  reports  generally  provide  very  little  detailed  intoimation  on  this  type  of  damage 
unless  it  is  related  to  the  cause  of  the  accident.  Studies  of  these  areas  must  rely  on  brief  statements 
and  accident  photographs  which  seldom  “zero  in*  on  the  desired  areas.  It  is  concluded  from  reviews 
of  available  data  that  a  floor  system  more  resistant  to  tear/rupture/separation,  though  still  flexible, 
may  reduce  some  of  the  debris  and  factors  which  are  believed  to  imp^e  evacuation  of  the  aircraft. 

ENGINE/PYLON  SEPARATION  OR  COLLAPSE 

Separation  of  an  engine  from  the  pylon  or  separation  of  the  pylon  from  the  wing  or  body  often  occurs 
in  accidents  involving  touchdown,  short/hard  touchdown,  overruns,  or  veering  off  the  runway.  When 
one  or  both  main  landing  gear  collapse  during  these  types  of  occturrences,  the  probability  of  engine 
pod  damage  or  separation  is  increased.  Generally,  loss  of  the  engine  (forward  or  reverse  thrust)  is  of 
minor  significance  but  rupturing  of  the  engine  fuel  feed  line  (releasing  fuel)  and  tearing  of  electrical 
leads  (causing  arcing)  can  be  a  hazard  because  of  the  potential  for  a  fire  occurring  at  the  fuel  feed 
line  break  point  The  signiflcance  of  this  pylon  break  fire  hazard  increases  if  the  wing  fuel  tanks  are 
ruptured  and  large  quantities  of  fuel  are  released  on  the  ground.  It  is  believed  that  the  engine  and  the 
pylon  break  tires  have  been  the  ignition  source  for  many  of  the  fuel  tank  fires.  Accident  reports 
seldom  confirm  or  deny  this,  since  it  is  not  generally  possible  to  establish  from  evidence  at  the 
accident  site  what  actually  provided  the  ignition  source.  In  some  occurrences,  friction  sparks  from 
wing  or  fuselage  sliding  on  terrain  may  have  caused  ignition  of  released  t&'k  fuel  only  seconds  or 
microaeconds  before  an  engine  pylon  tire  occurred.  There  is  no  known  way  to  esu-blish  the  actual 
sequence  of  the  events.  However,  from  a  review  of  accident  data,  there  appears  to  be  a  relationship 
between  wing  tank  ruptures,  severe  fuel  fires,  and  pylon  break  tires  that  indicates  pylon  break  fires 
probably  provided  the  source  of  ignition  for  released  fuel  in  maby  accidents. 

Of  the  153  accidents  in  this  crashworthiness  study,  94  involved  aircraft  with  engines  on  wing  pods 
and  59  involved  aircraft  with  engine  pods  on  the  aft  fuselage.  These  two  groups  of  aircraft  are 
reviewed  separately. 

Wing  Pod  Engined  Aircraft  Accidents 

Of  the  94  accidents  (including  known  and  probable  occurences)  involving  wing  pod  engined  aircraft, 
67  (7 1%)  involved  rupturing  of  the  wing  boa  fuel  tank  and  68  (72%)  involved  collapse  or  separation  of 
tlie  engine  pylon  to  the  extent  that  the  engine  fuel, feed  line  was  torn  or  ruptured.  The  occurrence  of 
these  two  types  of  damage  are  shown  in  figure  4.14. 

Fuel  tires  originating  at  the  fracture  of  the  engine  fuel  feed  line  in  the  pylon  an  reported  to  have 
occurred  in  12  accidents  and  probably  occurred  in  33  accidents.  No  tires  were  reported  at  this . 
frai:ture  point  in  23  accidents. 

The  proximity  of  the  wing  pod  engine  to  the  wing  box  fuel  tanks  has  resulted  in  correlations  between 
engine  separation,  fuel  tank  rupture,  and  a  severe  fuel  tire.  Approximately  71%  of  the  accidents 
involved  rupture  of  the  fuel  tank  and  releasing  fuel  on  the  ground  and,  of  the8e,.91%  were  considered 
largi!  fuel  spills  such  that  the  spill  area  probably  was  near  or,  adjacent  to  the  engine  pylon  location. 
The  study  shows  that  82%  of  the  large  fuel  spills  resulted  in  severe  tires  and,  in  78%  of  these,  a 
ruptured  engine  pylon  fuel  line  tire  probably  also  occurred. 

In  niimerous  accidents,  separated  engine  pods  have  rolled  or  tumbled  under  the  wing  or  fuselage  as 
the  iiircraft  slides  to  a  stop.  However,  accident  reports  seldom  indicate  that  the  pod  ruptured  the 
wing  box  fuel  tank  in  this  movement.  In  most  cases,  investigators  are  probably  unable  to  determine 
what  objects  actually  caused  tank  rupture. 


Aft  Body  Engined  Aircraft  Accidents 

Of  the  59  accidents  involving  aft  body  engined  aircraft,  38  (64%)  involved  rupturing  of  the  wing  box 
fuel  tanks  and  21  (36%)  involved  collapse  or  separation  of  the  engine  pylon  to  the  extent  that  the 
engine  fuel  feed  line  was  tom  or  *'"ptured.  The  occurrences  of  these  two  types  of  damage  are  shown 
in  figure  4.15.  Of  the  21  occurrences  involving  engine/pylon  collapse  or  separation,  7  resulted  from 
a  very  hard  touchdown,  7  due  to  impact  with  ground  objecte,  and  7  due  to  high  vertical  loads  as  the 
aircraft  slid  over  rough  ground  or  impacted  water.  No  engine  pod  s^iarations  were  known  to  be 
caused  by  pod  ground  contact  during  aircraft  slide  on  the  lower  fuselage. 

Fuel  fires  originating  at  the  fracture  of  the  engine  fuel  feed  line  in  the  pylon  are  reported  to  have 
occurred  in  two  accidents  and  probably  occurred  in  five  accidents.  Reports  indicate  that  no  Hre 
occurred  at  this  fracture  point  in  14  accidents. 

Severe  wing  tank  fuel  fires  occurred  in  26  accidents  but,  of  these,  engine/strut  fuel  line  ^s  were 
reported  in  1  and  probably  occurred  in  5.  This  indicates  that  wing  tank  fuel,  in  77%  of  these  cases, 
was  ignited  by  sometl^g  other  than  by  an  engine  fuel  feed  line  fire.  In  the  other  23%  (six  cases)  the 
reports  do  not  indicate  or  show  evidence  that  the  engine  fuel  feed  line  fire  provided  the  ignition 
source  for  the  wing  tank  fuel  fire.  In  most  accidents,  the  investigators  ere  probably  unable  to 
determine  the  actual  source  of  the  spilled  tank  fuel  ignition. 

Engine  Fuel  Feed  Line  Fire  Haxards 

In  the  153  accidents  used  in  this  study,  loss  or  collapse  of  an  engine  or  pylon  generally  creates  a 
potential  hazard  only  if  a  fire  occurs  at  the  point  of  fuel  feed  line  rupture  and.  if  in  flight,  the  fire  is 
sustained  for  possibly  30  seconds  or  more.  In  wing  pod  mounted  engine  aircraft,  the  hazard  is 
ignition  of  spilled  wing  tank  fuel  or  overheating  of  wing  fuel  tanks  to  the  point  of  explosions  or  skin 
bum-through.  If  tank  fuel  is  not  ignited,  the  engine  strut  fire  itself  generally  has  little  impact  on 
passenger  evacuation  or  survivability. 

In  aft  body  engined  aircraft,  the  hazard  is  bum-through  o^  the  aft  body  skins  and  a  fuel  line  fire 
burning  vital  controls  and  systems  wiiltin  the  aft  body.  These  fires,  being  remote  from  the  wing 
box  fuel  tanks,  are  a  potential  source  of  ignition  of  tank  fuel  only  if  the  tank  fuel  is  spilled  in  the 
area  under  or  around  the  aft  engines. 

Conclusions; 

1.  .  Engine  fuel  line  fires  caused  by  engine  separation  or  ooUapae  ate  a  hazard  of 

underdetermined  dimensions,  particularly  in  wing  pod  enginMl  aircraft  accidents.  The  source 
of  ignition  of  spilled  tank  fuel  is  seldom  reported  and  probably,  in  most  cases,  cannot  be 
actually  determined.  Nevertheless,  research  should  be  accomplished  in  the  area  of 
minimizing  the  flow  qr  volume  of  fuel  released  from  a  fiactured  engine  fuel  feed  line  and 
eliminating  the  sources  of  ignition  of  this  fuel. 

2.  Wing  box  fuel  tanks  have,  on  rare  occasions,  been  tom  open  when  engine  pylon  separates 
from  wing  structure.  Study  should  be  accomplished  to  develop  structure  fuse  points  to  assure 
a  clean  stmt  separation.  This  could  include  clean  fuel  line  separations  and  electrical  lead 
aeparations  without  arcing. 

3.  Engine  pylon  separation  or  collapse  often  follows  separation  or  coUanae  of  one  or  more  main 
landing  gear.  It  is  not  possible  to  determine  from  accident  reports  how  many  engine  pylons 
would  not  have  separated  or  collapsed  if  the  main  landing  gear  had  not  collapsed.  It  appears. 


Figure  4.  lS~enginelPylon  Separation ICollapse  and  Fuat  Tank  -jtura.  Aft  Body  Fngmed  Aircraft 
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however,  to  be  of  a  sufficient  number  to  justify  research  in  landing  gear  design  philosophy 
and  development  of  landing  gear  is  more  tolerant  of  travel  over  rough,  soft  terrain  off 
the  runway. 

CABIN  DOOR  OR  EXIT  JAMMING  OR  BLOCKAGE 

Of  the  153  impact  survivable  accidents  studied,  reports  for  only  47  accidents  cited  occiurences  of 
entry  door,  galley  doer,  cockpit  door,  or  emergency  exits  jamming  or  being  blocked  by  cabin 
equipment,  debris^  or  outside  objects.  It  is  believed  that  door  or  exit  related  evacuation  problems 
siso  occurred  in  many  other  accidents. 

Fuselage  breaks  often  provide  a  handy  and  expeditious  means  for  some  of  the  passengers  and  crew 
to  evacuate  the  aircraft.  In  10  of  the  47  accidents,  where  door/exit  problems  were  cited,  the  reports 
also  indicated  that  some  passengers  and  crew  departed  via  breaks  and  holes  in  the  fuselage.  In 
most  cases  these  people  could  have  also  departed  through  available  doors  or  exits.  However,  in  a 
few  cases  the  fuselage  break  was  probably  the  only  means  of  escape. 

In  many  accidents  which  involved  severe  fuel  fires,  some  doors  or  exits  could  have  been  readily 
opened  but  were  not  used  because  of  fire  in  that  particular  area  outside  the  fuselage. 

Available  factual  data  relating  to  the  47  accidents  citing  door/exit  problems  are  tabulated  in  Hgure 
4.16.  These  data  indicate  that  most  occurrences  (57%)  involve  doors  at  the  front  of  the  fuselage 
and  only  16%  at  mid-body  and  27%  at  the  aft  fuselage.  This  ratio  is  expected  since  in  ground  slide 
accidents  the  forward  fuselage  is  the  first  to  impact  objects  such  as  buildings,  trees,  poles,  etc. 
These  data  also  indicate  that  forward  fuselage  doors  involved  jamming  in  64%  of  the  cases  and 
blockage  in  36%  of  the  cases.  Doors  in  the  aft  fuselage  had  approximately  the  same  ratio.  Mid-body 
exits,  however,  had  this  ratio  reversed  with  blockage  being  6  i%  of  the  cases  and  jamming  only 
36%  of  the  cases.  It  is  probable  that  wing  box  structure  provides  protection  from  jamming  of  the 
mid-body  overwing  exits. 

Considering  all  doors/exits,  jamming  is  reported  in  59%  of  the  cases  and  blockage  in  41%  of 
the  cases. 

Jamming  is  generally  caused  by  door  frame  distortions,  however,  accident  reports  seldom 
provide  much  detail  on  how  or  what  caused  the  problem.  Floor-lift  due  to  upwa.d  forces  from 
the  cargo  area  often  cause  total  or  partial  jamming  of  doors.  The  same  upwiml  forces  may 
also  cause  door  frame  distortion.  In  a  few  cases  evacuation  slides  arc  involved  in  door 
jamming. 

Blockage  ia  generally  caused  by  collapsing  of  overhead  storage  compartments  and  release  of 
the ,  contents.  This  debris  usually  results  in  complete  inabibty  to  open  the  door  or  exit. 
Spillage  of  galley  contents  occurs  frequently,  which  tends  to  cause  a  delay  in  opening  the 
door.  In  a  few  cases  displacement  of  a  galley  or  coat  storage  compartment  has  caused  door 
blockage,  particularly  at  the  forward  fuselage  locations. 

The  number  of  fatalities  that  were  a  direct  result  of  door  jamming  or  blockage  can  seldom  be 
determined  or  even  estimated  from  available  data.  Of  the  47  accidents  in  which  door/exit  problems 
were  cited,  only  24  involved  fatalites  (2187  total  onboard  of  which  753  or  34.4%  were  fatalities). 

Of  the  24  accidents  with  fatalities,  9  had  2  or  more  doors  or  exits  jammed  or  blocked  and  4 1.9%  of 
those  onboard  were  fatalities.  In  ^he  other  15  accidents  only  1  door  or  exit  was  jammed  or  blocked 
and  27.1%  of  those  onboard  were  fatalities. 


From  this  study  of  door  and  exit  problems  during  emergency  evacuations,  it  can  be  concluded  that 
survivability  might  be  increased  if  floors  and  structure  in  the  area  of  each  ent^  and  galley  door  be 
designed  to  eliminate  jamming  of  doors,  and  if  overhead  storage  comp  utments  be  designed  to 
resist  collapse  and  reduce  door  blockage^ 

WATER  ENTRY 

Accidents  in  which  aircraft  impact  water  or  come  to  rest  in  deep  water  involve  special  hazards.  In 
scenario  type  S13, 46.3%  of  the  occupants  drowned.  There  are  16  water  accidents  in  the  data  Hse 
of  which  water  was  an  important  factor  in  11  cases.  These  11  cases  are  reviewed. 

Water  cases  that  are  excluded  are  the  707  Oso  accident,  L-lOll  Everglades  accident,  727 
Maderia  accident,  727  Mexico  City  accident,  and  the  707  Rio  de  Janerio  accident  These  accidents 
resulted  in  trauma  fatalities  for  the  most  part,  and  water  was  only  incidental  to  the  accident  outcome. 

Water  entry  accidents  of  concern  appear  to  have  some  conunon  factors.  First  they  usually  occur  at 
night  Second,  there  is  usually  a  relatively  rapid  loss  of  flotation  resulting  in  a  portion  or  all  of  the 
aircraft  sinking.  Third,  while  there  has  been  confusion,  most  occupants  have  been  able  to  evacuate 
the  aircraft  Finally,  many  of  the  drowning  fatalities  occur  after  the  occupav  ls  have  left 
the  aircraft. 

Assessment  of  the  water  entry  accidents  is  shown  in  figure  4. 17.  The  accidents  are  divided  into  two 
groups:  high  energy  impact  and  slide/roll  into  the  water.  There  are  eight  high  energy  aeddenta.  For 
the  Caravelle  Maderia  accident  ail  that  is  known  is  that  the  aircraft  touched  down  at  sea.  the  fuselage 
is  presumed  to  have  broken,  and  the  numbers  of  fatalities  and  injuries.  Gonsequently.  it  is  classified 
unknown.  The  DC-9  Palermo  accident  has  a  little  data  and  is  classified  known,  but  is  borderline. 
There  are  three  cases  where  the  aircraft  rolled  or  slid  into  ^e  water.  For  all  of  these  aeddenta  the 
fuselage  experienced  either  lower  surface  crush  or  had  one  or  more  breaks. 

In  all  the  high  energy  impacts  there  was  a  loss  of  flotation  attributed  primly  to  f  uselage  damage. 
While  tank  rupture  resulted  in  some  loss  of  buoyancy,  the  ma  jor  effect  of  tank  rupture  was  to  expose 
occupants  to  fuel  (chemical  bums)  and  to  make  everything  slippery. 

The  floor  system  was  known  to  be  disrupted  in  six  of  eight  aeddenta.  Disruption  was  due  in  part  to 
the  hydrodynamic  forces  of  water  entering  the  fuselage  through  the  underside  or  through  breaks  in 
the  fuselage. 

A  part  of  this  disruption  resulted  in  displacement  and  elevation  of  floor  beams  with  subsequent 
separation  of  seats,  and  also  contributed  to  problems  in  the  evacuation  of  the  aircraft.  In  addition, 
doors  were  jammed  and  debris  from  cabin  interior  systems  was  present  In  the  727  Penssicola 
aeddent  water  destroyed  the  lower  fuselage,  ruptured  the  body  fuel  lines,  and  separated  an  engine. 

Accidents  where  aircraft  skidded  or  rolled  into  water  experienced  similar  damage  as  the  high  energy 
impact,  but  to  a  lesser  degree.  However.  Jose  proximity  of  land,  substantially  reduced  drowning. 
The  15  drov/nings  in  the  DC-8  Rio  de  Janerio  aeddeht  were  ettributed  to  disorientation  of  the 
occupants  after  they  evacuated  the  aircraft  and  to  improper  use  of  flotation  dedees. 

After  the  DC-9  St.  Croix  accident,  a  special  study  (ref.  2)  was  made  by  the  NTSB  on  water  ditching. 
Here,  even  though  it  was  known  that  ditching  was  inevitable,  23  occupants  drowneo  There  were 
problems  with  life  rafts,  life  vests,  and  seat  belts.  Other  problems  with  this  equipment  were 
encountered  in  the  DC-8  Los  Angeles  accident.  It  is  felt  that  incidence  of  drowning  could  be 
substantially  reduced  by  better  location  of  life  rafts.  For  instance,  placement  of  rafts  above  the  exits 
with  external  access  might  provide  better  accessibility. 
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Improved  crashworthiness  might  also  be  obtained  by  increasing  the  resistance  of  the  fuselage  to 
breaks  and  by  increasing  the  resistance  of  the  lower  fuselage  to  water  penetration. 

ADVANCED  MATERIALS 

The  application  of  advanced  materials  such  as  improved  metal  alloys  and  composites  to  structure 
that  has  a  significant  crash  function  is  now  considered.  As  seen  from  the  above  discussion,  the 
conventional  commercial  aluminum  jet  transport  aircraft  designed  to  FAR  25  have  demonstrated 
generally  good  structural  crashworthy  characteristics. 

Consequently,  those  materials  having  fracture,  impact  and  ductility  properties  similar  to  aluminum 
might  be  expected  to  be  applicable  on  a  direct  substitution  basis  without  affecting  crashworthiness. 
Where  the  propeities  are  dissimilar,  such  <«s  for  composites,  questions  are  raised  on  how  to  maintain 
an  adequate  level  of  crashworthiness. 

There  is  little  data  available  on  the  crash  behavior  of  composite  structures.  The  U.S.  Army  has  active 
programs  directed  towards  the  application  of  compositea  in  helicopters  as  part  of  the  ACAP  and  in 
sponsored  research.  In  addition  there  are  mihtary  research  programs  on  ballistic  damage  to 
composite  structure.  Results  of  these  programs  will  provide  valuable  information.  While  these  results 
may  not  be  directly  appUcable  to  the  commercial  jet  transport,  they  may  suggest  approaches  to 
research  that  may  be  fruitful. 

Use  and  planned  use  of  advanced  composites  in  both  military  and  commercial  aircraft  is  in  a  rapidly 
expanding  mode.  Use  of  graphite/epoxy  as  a  viable  material  for  aerospace  structures  became  a 
serious  consideration  in  the  mid-19608  with  the  development  of  Thomel  graphite  fibers  by  Union 
Carbide.  InitiaUy,  use  of  the  material  was  hampered  by  high  cost  and  lack  of  technical  data.  Currently, 
both  of  these  factors  have  been  alleviated  so  that  extensive  use  of  the  material  is  both  feasible  and 
advantageous.  The  impetus  is  the  typically  20  to  30  percent  reduction  in  structural  weight  that  can 
be  realized  with  accompanjhng  increases  in  fuel  economy  or  aircraft  performance. 

The  application  of  composites  on  military  aircraft  is  moving  rapidly.  The  F-18  has  wing  skins  and  tail 
structures  of  graphite.  The  entire  wing  structure  of  the  AV-BB  Harrier  is  graphite,  as  are  the  forward 
fuselage  and  tail. 

Planned  use  of  graphite  on  future  commercial  transport  aircraft  is  also  aggressive.  The  Lear  Fan 
aircraft  is  all  composite  structure  and  the  Falcon  10  will  have  a  graphite/epoxy  wing  box  structmre. 
The  757  and  767  aircraft  will  have  control  surfaces  of  graphite.  These  include  the  spoilers,  ailerons, 
elevators,  and  rudders.  Main  landing  gear  doors  will  be  a  combination  of  graphite  and  Kevlar.  There 
ar^  also  scricus  plans  for  other  downstream  uses  of  graphite  on  the  757.  These  include  use  of 
graphite  for  selected  floor  beams  and  for  horizontal  and  vertical  empeonage  inspar  structures.  Use  of 
graphite  for  such  parts  as  the  main  landing  gear  beam  and  flaps  is  also  under  study. 

Graphite  composites  are  used  on  the  757  and  767  aircraft  f(»  some  components.  Most  applications 
are  for  secondary  structure.  Application  in  control  surfaces  follows  Boeing’s  successful  program 
with  NASA,  which  tested  and  certified  graphite/epoxy  elevators  for  the  727.  A  similar  program  is 
underway  for  the  737  horizontal  stabilizer.  Graphite  737  stabilizer  components  have  been 
successfully  ground  and  flight  tested  and  certification  is  expected  in  the  near  future. 

In  considering  the  various  aircraft  parts  which  will  be  fabricated  from  composites,  it  must  be 
emphasized  that  these  will  be  designed  and  tested  to  meet  the  requirements  of  FAR  25.  As  an 
example,  floor  beams  will  be  analyzed  ahd  tested  to  misure  their  being  able  to  withstand  the 


stipulated  9  g  seat  forces.  Simutrly,  crash  load  requirements  will  be  included  in  the  design  of  other 
components.  The  landing  gear  be  im  is  designed  so  that  it  will  break  away  in  event  of  gear  collapse 
so  it  will  not  puncture  wing  fuel  'oUb. 

The  question  becomes  then,  how  will  the  structure  react  if  the  design  crash  loads  are  exceeded  and 
importantly,  in  the  event  of  a  fire.  Relative  to  this  was  a  recent  study  to  determine  if  graphite 
composites,  if  subjected  to  a  catastrophic  Are  situation,  might  release  filaments  that  would  cause 
widespread  electrical  shorts  and  cause  failure  of  proximity  electrical  equipment,  for  example  failure 
of  power  substations.  In  this  case,  NAiSA  concluded  after  extensive  study,  that  risks  involved  with 
aerospace  use  of  fiber  carbon  fibers  were  minimal.  The  potential  loss  rate  was  estimated  at  an 
insignificant  $1000  per  year  (ref.  3). 

Another  important  consideration  is  the  mechanism  for  energy  dissipation  in  a  crash.  This  is  to  a  great 
extent  dependent  on  the  structural  conAguration.  Most  effectively,  dissipation  is  by  deformation 
such  as  buckling  or  material  elongation.  The  ability  of  structure  to  deform,  however,  depends 
strongly  on  the  construction  materials.  Relative  energy  absorbing  characteristics  of  materials  are 
generally  indicated  by  the  area  under  their  load  deflection  or  stressj'strain  curve.  Metals  beneAt  from 
their  relative  high  elongation  capability  or  ductility.  Fibers  in  composite  structure  by  nature  remain 
elastic  to  failure  and  have  low  elongation  capability,  thus  their  energy  absorbing  capability  can  be 
expected  to  be  low.  Differences  between  the  two  materials  is  demonstrated  in  Agure  4.18. 

Another  meaningful  comparison  that  can  readily.be  made  is  elongation  to  failure.  Graphite  laminates 
typically  fail  at  approximately  0.8  to  1.0  percent  strain  while  2024-T3  aluminum  typically  strains  to 
10  to  12  percent. 

Some  apparent  ductility  can  be  gained  by  stressing  in  shear  or  by  testing  axially  with  the  fibers 
oriented  off-axis,  say  at  ±45°  to  the  test  axis.  The  shear  case  is  demonstrated  by  a  curve  for  a  Kevlar 
fabric  laminate  in  Agure  4.19.  Some  gain  in  effective  ductility  may  be  obtained  by  off-axis 
reinforcement  in  multidirectional  laminates,  however,  the  gain  is  suspected  to  be  small.  Seemingly, 
when  fibers  inline  with  the  load  fail,  load  should  be  transferred  to  off-axis  fibers  with  greater  strain 
capability  to  absorb  additional  energy. 

However,  when  the  inline  Abers  fail,  the  effect,  unlike  a  ductile  case,  is  very  dynamic  and  it  is  unlikely 
signiAcant  energy  is  absorbed.  This  instantaneous  energy  release  is  demonstrated  by  noting  the 
three-piece  failure  of  a  graphite  multidirectional  laminate  tension  specimen  in  figure  4.20.  In  some 
cases,  specimens  may  fail  in  4  to  5  pieces  as  a  result  of  initial  failure  induced  shock  waves. 

A  more  effective  method  of  improving  energy  absorbing  characteristics  is  to  add  reinforcement 
Abers  with  higher  strain  capability.  Examples  are  to  use  glass  or  Kevlar  Abers.  The  effectivity  of  using 
hybrid  techniques  to  . improve  impact  properties  has  been  demonstrated  by  use  of  an  instrumented 
Charpy  test.  This  is  described  in  reference  4.  While  the  conventional  Charpy  test  is  only  concerned 
with  total  energy,  the  instnunented  test  differentiates  between  the  initiation  and  propagation  phase 
to  give  a  ductility  jndex.  This  is  illustrated  in  Agure  4.21. 

The  improvement  in  energy  absorption  characteristics  of  the  graphite  by  two  levels  of  Kevlar  fiber 
additions  is  indicated  by  the  total  energy  and  ductility  index  Agures  in  table  4.7.  The  improvement  is 
signiAcant 

Other  areas  of  concern  relative  to  composites  and  crashworthiness  are  as  follows: 

1.  Fuel  containment  in  wet  wings 


Figure  4-20.~Three  Piece  Failure  of  a  Graphite  Tension  Specimen  Illustrating  Failure 
Induced  Shock  Wave  Effects 


Figure  4.21.  -  Schematic  Representation  of  Load  History  in  an  Impact  Tost 


Table  4.7-Impact  Properties  of  Unidirectional  Compos'te  Materials 
as  Determined  from  Instrumented  Charpy  Test 


Reinforcing 

Fibers 

Apparent 
Flexure 
Strength 
ksi  (MN.m*) 

Total  Energy  Per  Unit  Area 
ft-lb/in.»  (.)/m*). 

Ductility 

Index 

Dial 

Oscilloscope 

HMS-graphite 

125  (860) 

3.8  (8  X  10’) 

3.8  (8  X  10’) 

0.0 

20%keviar49 

80%  HMS-graphite 

170  (1170) 

34.3  (7.2  X  1(7*) 

30.5  (6.4  X  10*) 

6 

41%kevlar49 

59%  HMS-graphite 

141  (970) 

46.7  (9  8  X  10*) 

42.9  (9  X  10*) 

4 

The  first  value  was  based  on  the  onset  of  nonlinearity.  The  number  in  parenthesis  was  based  on  maximum  stress. 
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2.  Smoke  toxicity  for  interior  cabin  uaea 

3.  Bum-through  rates  for  fuselage  applications 

Fuel  containment  characteristics  might  be  expected  to  be  inferior  to  the  metal  wing.  This  is  primarily 
due  to  the  material  being  unable  to  plastically  deform  and  still  remain  intact.  Tear  resistance  of  the 
material  is  high  however,  and  failures  tend  to  be  of  a  delaminar  nature.  Thus,  penetration  damage 
may  not  be  as  severe.  Also  because  of  a  lower  density,  structural  inertia  loads  will  be  lower. 

Smoke  toxicity  is  not  currently  considered  to  be  a  problem.  Risks  are  consistent  with  occurrence  of 
other  similar  material  now  in  the  internal  fuselage  area. 

Burn-through  rates  for  composites  are  expected  to  be  lower  than  for  conventional  aluminum.  The 
graphite/epoxy  will  melt  and  the  fiber  char  while  the  aluminum  will  melt.  The  much  lower  thermal 
conductivity  of  the  composite  (3  BTU/^F,  hr,  ft,  ft^,  as  compared  to  80  for  aluminum)  will  give  it  a 
decided  advantage  in  deterring  throiigh-the-thickness  heat  transfer. 

In  order  to  assess  the  crash  performance  of  composite  structural  components,  it  is  necessary  that 
the  performance  of  current  metal  components  be  known  quantitatively.  Differences  in  crash 
response  modes  and  the  performance  of  the  crash  function  may  then  be  compared  for  each 
component.  With  improved  analysis  and  test  methods,  design  provision  may  be  made  for  occupant 
protection. 

Crash  performance  of  advanced  material  components  must  be  assessed  in  the  context  of  the 
complete  airframe.  Implied  reduction  in  energy  absorption  seen  in  coupon  tests  may  be  offset  by 
design  iimovation  in  the  structure,  by  use  of  parasitic  crushable  energy  absorbers  in  key  locations 
such  as  seats  and  lower  frames,  or  may  not  even  exist.  The  entire  concept  of  occupant  protection 
may  need  to  be  revised.  Optimization  studies  of  occupant  protection  strategies  should  be  made. 
Research  is  needed  to  evaluate  these  advanced  concepts. 


6.0  CURRENT  STATE  OP  CRASHWORTHINESS  TECHNOLOGY 

An  overview  of  the  current  state  of  crashworthiness  technology  is  presented  in  this  section.  The 
U.3.  Army’s  Airc.aft  Crash  Survival  Design  Guide  (ref.  5),  which  provides  a  crashworthiness 
technical  base  for  light  aircraft  and  helicopters  in  military  applications,  is  reviewed  for 
applicability  to  commercial  jet  transport  aircraft. 

Analytical  methods  for  modeling  the  occupant  response  to  a  crash  environment  are  reviewed  and 
assessed.  Human  impact  tolerance  is  renewed  and  piohlema  of  relating  impact  injury  to 
engineering  quantities  are  discussed.  In  addition,  the  applicability  of  generally  recognized 
t:>lerance  limits  to  the  population  of  aircrsift  occupants  is  conaidoed. 

The  status  of  analytical  methods  for  treating  nonlinearities  in  ineliutic  structural  behavior  and 
large,  deflection  geometry  is  reviewed.  A  review  of  crash  tests  of  complete  aircraft  and  of 
experimental  testing  of  structural  components  has  been  made.  A  survey  of  impact  test  facilities  is 
presented  and  problems  of  testing  complete  commercial  jet  transport  aircraft  and  structural 
components  is  discussed. 

An  assessment  of  cirrer.t  crashworthiness  technology  as  applied  to  commercial  transport  aircraft 
is  made.  Requirements  to  improve  crashworthiness  engineering  are  presented  and  research  to 
develop  the  necessary  technology  is  discussed. 

REVIEW  OF  U.3.  ARMY  CRASH  SURVIVAL  DESIGN  GUIDE 

The  guidelines  proposed  in  the  new  U.S.  Army’s  Aircraft  Crash  Survival  Design  Guide  have  been 
examined  to  identify  areas  relevant  to  commercial  airplanes. 

The  Aircraft  Crash  Survival  Design  Guide  contains  a  summary  of  material  that  provides  a 
background  on  crashworthiness  in  general.  SpedHc  application  of  the  guidelines  to  commercial 
aircraft  has  been  assessed.  Appendix  D  presents  a  detailed  synthens  of  principles,  practices  and 
comments  based  on  abstracting  the  Guide  and  incorporating  other  experiences,  opinions  and  data. 

The  new  U.S.  Army’s  Aircraft  Crash  Survival  Design  Guide  defines  a  number  of  goals  that  the  U.S. 
Army  desires  to  achieve  in  order  to  improve  protection  in  Army  aircraft.  Evolution  of  these  goals 
into  clear-cut  design  criteria  is  a  continuing  process;  this  third  update  of  the  Guide  incorporates 
feedback  from  interim  experience,  points  out  the  likely  need  for  design  trade-offs  more  clearly 
than  the  previous  editions,  and  as  clearly  points  out  compranises  will  likely  remain  after  all 
possible  trade-offs  are  complete.  Two  factors  emerged  from  investigation  of  the  Guide  that  bear 
comment:  the  autonomous  role  the  Army  has  in  exploring  new  concepts,  including  freedom  to 
waive  requirements;  and  the  distinctions  in  vehicles  and  corresponding  impact  conditions  from 
Army  aircraft  to  large  commercial  aircraft. 

First  the  autonomous  role  of  the  Army  and  tho  aircraft  they  fly  gives  them  many  options  in 
exploring  protective  provisions.  They  have  small  vehicles  (less  than  20-pa8senger  mavimiim 
capacity  and  more  typically  less  than  5)  with  relatively  cleareutimplicatioas  and  ramifications  for 
any  changes  that  might  be  considered. 

Additionally,  as  specification  engineer,  purchaser,  and  user,  the  Army  is  in  a  position  to  revit.w 
trade-offs  and  waive  goals,  guidelines,  and  criteria  when  warranted.  Under  current  regulatory 
procedures,  this  is  not  possible  in  the  commercial  environment;  requirements,  once  established, 
may  not  be  waived.  'This  helps  to  clarify  why  goals,  guidelines,  and  criteria  are  not  clearly 
distinguished  in  the  Army’s  Guide;  such  waiver  autlimaty  makes  it  possible  to  emphasize 


“maximum  poaaible  protection”  and  explore  new  concepts.  Autonomous  planning,  purchasing,  and 
user  roi''s  also  make  it  more  feasible  to  explore  and  appraise  ideas  that  can  not  be  easily 
determined  or  demonstrated  by  analysis  or  may  be  interpreted  differently  by  individual  reviewers 
(e.g.,  “provide  as  much  protection  as  possible"). 

Other  industry  segments  have  a  different  circumstance;  by  design  necessity,  objectives  are  based 
on  minimum  acceptable  requirements  for  adequate  protection  under  given  circumstances. 
Objectives  are  justified  as  actually  being  proven  and  beneficial,  the  waiver  authority  used  in  the 
Army  does  not  exist  in  the  commercial  environment. 

Secondly,  there  is  considerable  difference  in  likely  impact  characteristics  between  the  small,  rigid 
body  aircraft  used  by  the  Army  and  the  large,  flexible  body  aircraft  used  commercially  Army 
goals  are  based  on  systems  which  will  suffer  a  larger  range  of  impact  attitudes  and  higher  impact 
loads.  For  example,  spin-in  and  rotor  thrashing  causes  large  lateral  forces  and  upside  down 
impacts  that  are  essentially  unheard  of  in  large  fixed-wing  aircraft.  Additionally,  there  is  a 
marked  difference  in  inherent  energy  absorbing  features  between  the  two  airplane  types.  For 
example,  the  small  airplane  has  a  much  smaller  subfloor  volume,  fewer  structural  members,  and  a 
correspondingly  more  rigid  structural  area  to  absorb  energy  than  exists  for  the  large  cross  section 
of  the  flexible-body  aircraft.  Some  of  the  resulting  implications  are  inferred  in  the  Guide.  They 
point  out,  for  example,  that  cargo  tiedown  criteria  from  the  Army  Guide  are  much  larger  than  Air 
Force  practices,  but  acknowledge  that  there  is  no  statistical  reason  to  change  Air  Force  criteria. 

The  above  describes  some  of  the  reasons  to  question  direct  transfer  of  guidelines  or  specifications 
from  the  Army  Guide  to  commercial  systems.  Although  many  of  the  principles  apply,  are  relevant, 
and  are  practiced,  criterion  bases  are  clearly  different.  Relevant  criteria  have  been  abetracted  and 
collated  from  the  Guide,  and  the  resulting  interpretation  and  commentary  is  presented  in 
appendix  D.  The  new  Guide  updates  previous  guidelines  and  goals  based  on  Army’s  experience  and 
their  recognition  of  broader  research  and  development  activities  over  the  last  10  years.  In  addition 
to  data  in  the  Guide,  new  information  continues  to  be  developed  and  earlier  information  continues 
to  be  clarified.  Some  such  information  is  added  to  Guide  information  in  appendix  D  (e.g.,  for 
tolerance  and  restraints). 

The  review  of  the  Guide  suggests  some  research  topics  and  tools  that  are  warranted,  can  be  worked 
usefully,  and  will  improve  the  technology  for  impact  protection.  Army  goals  to  improve 
survivability  for  impacts  of  small  aircraft  include  four  major  areas:  (1)  system  design  for  structural 
integrity,  energy  absorption,  and  po8^impact  provisions;  (2)  design  principles  for  impact 
protection  via  aircraft  seats,  rest! uints,  litters,  and  padding;  (3)  modeling  and  testing  methods  for 
appraising  impact  loads,  load  paths  and  their  effects;  and  (4)  human  impact  tolerance 
and  protection. 

System  design  considerations  in  the  Army  continue  to  empnasize  energy  absorption  and  postcrash 
protection.  Newly  under  consideration  are  possible  ways  to  avoid  reduction  of  and  intrusion  into 
occupiable  volume  caused  by  impact  loacling. 

Energy  absorption  at  the  structural  level  remains  a  difficult  concept  to  design  and  control. 
Absorbing  provisions  include  gear,  wings,  fuselage,  seats,  litters,  and  restraints.  Dynamic 
interactions  at  the  system  level  are  so  complicated  that  final  resolution  of  questions  by  the  Army  is 
still  by  teet  —  full-scale  drop  tests  are  practiced.  However,  several  computer  models  providing  foil 
system  simulation  have  been  under  development  for  several  years  and  are  approaching  stages 
where  they  should  be  challenged  by  attempts  at  real  calibration  and  application. 

Postcrash  survival  continues  to  receive  very  heavy  emphasis  in  commercial  systems.  A  major 


govemment/industxy  program  is  being  carried  out  that  has  multiple  objectives,  including:  to 
improve  control  of  Hre,  develop  new  materials  with  improved  characterip^ics,  and  develop  a  more 
heat  resistant  escape  slide. 

Evidence  is  starting  to  emerge  suggesting  feasibility  for  some  concepts,  but  limitations  remain  to 
be  resolved.  Four  examples  are:  (1)  fuel  inerting  actuation  by  impact  acceleration,  may  work  on 
impact,  but  may  also  actuate  at  altitude  in  turbulence  acceleration;  (2)  heai:  resistant  slides  are 
being  developed,  but  some  may  not  be  stowable  without  major  changes  and.  others  may  have  a 
short  storage  life;  (3)  some  design  features  for  control  of  fuel  line  disturbances  are  proving 
effective;  (4)  computer  simulations  of  some  processes  are  being  explored,  for  example,  simulation 
of  Hre  propagation  to  improve  understanding  of  and  ability  to  control  Hres,  and  simulation  of 
evacuation  performance  to  provide  an  improved  engineering  tool.  These  are  in  the  early 
exploration  stages  and  should  be  continued. 

Design  principles  emphasizing  energy  absorption  concepts  for  seats,  litters  and  restraint  systems, 
are  evolving  at  a  more  rapid  pace.  Load  limiters  are  being  considered  as  peak  load  alleviator::  to 
help  maintain  some  degree  of  system  integrity.  Tbey  provide  increased  assurance  the  seat 
occupant  will  remain  in  place,  and  will  not  be  subjected  to  loads  exceeding  his  impact  tolerance., 

Modeling  approaches  simulating  energy  absorption  characteristics  at  the  seat-restraint  level  are 
demonstrating  feasibility  as  a  design  tool  (see  Occupant  Modeling  Methods,  following).  They  could 
be  used  to  explore  and  develop  effective  energy  absorbing  seat-restraint  concepts,  and  offer  a  cost¬ 
and  time-effective  approach  to  resolving  energy  absorption  questions  for  the  new  composite 
materials  technology.  But  stronger  does  not  automatically  mean  safer,  and  a  rigid  20  g  seat  will  not 
necessarily  provide  the  protection  of  a  ductile  seat  that  starts  yidding  at  lesser  loads.  Composites  do 
not  feature  the  same  ductilities  as  metals,  and  consequently  possess  different  energy  absorbing 
characteristics.  Accordingly,  use  of  composites  may  require  alternative  design  concepts  (e.g., 
different  seat  leg  design)  in  order  to  beneHt  from  the  design  advantages  of  composites  without  losing 
the  energy  absorption  features  of  the  earlier  metal  seating  systems. 

Modeling  coupled  with  testing  could  become  a  meaningful  combination  for  developing  and  evaluating 
system  design  concepts.  Some  existing  models  ior  structure,  seat,  restraint,  and  occupants  could 
be  calibrated  to  real  world  observations,  integrated  into  a  ^gle  system  concept  and  used  for 
advanced  concept  evaluations,  for  identifying  specific  data  and  test  needs,  and  for  predicting  the 
outcome  of  major  system  tests.  An  overview  of  the  models  voat  could  be  used  for  this  purpose  is 
presented  in  table  5.1. 

The  desirable  approach  would  be  in  two  phases.  First,  experience  with  the  various  models  is  now 
sufficient,  and  it  should  be  feasible  to  develop  a  detailed  specification  to  define  and  develop  a  aeries 
of  modules  to  permit  exploration  and  development  of  individual  elements  that  could  be  combined  to 
estimate  the  performance  of  the  occupant,  restraint,  seat,  and  structure.  Second,  it  is  necessary  to 
develop  and  demonstrate  calibrated  three-dimensional  performance  against  real  teat  data,  and 
define  ground  rules  for  appropriate  use  of  2-D  and  3-0  models.  Some  models,  such  as 
PROMETHEUS  m,  are  two-dimensional  but  can  demonstrate  a  high  degree  of  accuracy  in  predicting 
to  a  test  situation.  Some  added  features  may  be  needed  to  complete  2-D  applications  potential  (e.g., 
in  simulating  an  energy  absorbing,  deforming  seat).  From  this  remit,  and  associated  knowledge  it  will 
be  easy  to  identify  and  develop  3-D  reHnements.  The  3-D  capability  would  complete  occupant 
development  needs  and  also  help  to  discriminate  when  2-D  and  3-D  models  migh.i:  be  appropriate. 

Human  impact  tolerance  data  continues  to  be  in  dire  need.  Data,  indices,  and  estimates  of  tolerances 
are  limited  in  both  accuracy  and  scope  of  applicability.  Obviously,  tolerance  limit  data  are  not  readily 
acquired.  However,  new  data  below  the  tolerance  hazards  continues  to  be  generated  and  will  be 
ne^ed  to  reduce  or  eliminate  the  current  constraints  on  data  (see  Human  Impact  Tolerance,  arid 
app.  D). 


Table  5. 1-Plan  tor  Developing  Needed  Models 


Develop/calibrate 

Predict  to 

Needed 

Appraise 

Develop  specitication 

Models/modules 

New  tests 

Model/module 

Potentially 

Synthesize  elements 

Refine  synthesized 

Purpose 

Usable  models* 

From  known  models 

Model(s) 

PROMETHEUS  III 

Occupant 

SOM-LA 

• 

Simulation 

CALSPAN 

OCCUl 

Laboratory  data 

Planned 

ATB  (articulated 

Army  drop  tests 

1984 

total  body) 

NASA  tests 

NASA-FAA 

Restraint 

PROMETHEUS  II! 

DC-7  test 

Drone 

Simulation 

SOM-LA 

RESTR  1 

Constellation 

Test 

ATB 

Test 

FAA  tests 

PROMETHEUS  III 

Seat 

SOM-LA 

Simulation 

DYCaST 

KRASH 

AOINA 

SET  1 

DYCAST 

Structure/ 

KRASH 

Fuselage 

AOINA 

ACTION 

STRUK  1 

'Improveir.fcnts  in  existing  models  might  be  accomplislied  by  including  small  packages  such  as  the  FEAP  74 
structural  contact  model 
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More  definitive  research  ia  needed  for  effective  use  of  human  tolerance  data.  Here,  too,  since 
tolerance  limit  research  is  impractical,  models  may  be  useful  to  explore  tolerance  in  controlled 
tests  to  establish  exposures  in  accidents  and  thus  to  update  the  data  base  using  results  from  real 
accidents. 


OCCUPANT  MODELING  METHODS 

Numerous  dynamic  models  of  the  human  body  have  been  developed  for  crash  impact  analysis  to 
predict  the  respond  of  the  occupant,  restraint  andyor  seat  systems.  One-,  two-,  and  three- 
dimensional  models  have  been  developed.  More  broadly  described  in  this  present  report  arc: 

1.  Dynamic  Response  Index  (DRI)  (ref.  6) 

2.  Seat  Occupant  Model:  Light  Aircraft  (SOM-LA)  (ref.  7) 

3.  PROMETHEUS  (now  PROMETHEUS  rH,  ref.  8),  twoHlimensional,  restraint  performance 
integrated  with  body  dynaiUics  and  other  outputs  similar  to  SOM-LA 

OCCUPANT  MODELING  SUMMARY 

Three  occupant-simulation  computer  programs  are  evaluated  in  the  following  discussions  for  their 
ability  to  produce  useful  engineering  data  regarding  relative  safety  of  a  restrained  occupant:  a  1-D 
model  (DRI),  a  2-D  model  (PROMETHEUS  HI)  and  a  3-D  model  (SOM-LA). 

The  one  dimensional  model  (DRI)  is  usable  only  for  seat  ejection  evaluation  and  is  of  no  use  for 
evaluating  the  safety  of  commercial  aircraft.  The  two-dimensional  model  (PROMETHEUS  HI)  is 
suitable  for  producing  sophisticated  engineering  trade-off  data  and  is  being  used  for  tiiis  purpose, 
subject  to  the  limitations  imposed  by  the  2-D  nature  of  the  simulation.  The  3-D  model  (SOM-LA) 
needs  modeling  improvements  before  being  usable  for  engineering  purposes.  Needed 
improvements  are  technically  difficult  and  fall  into  the  realm  of  applied  research.  Although  SOM-LA  is 
not  currently  adequate  for  evaluation  of  restraint  system  perfonnance,  it  provides  a  rough 
approximation  of  the  gross  motion  of  the  occupant  for  purposes  of  approximating  the  dynamic  loads 
on  the  structure.  The  possibility  of  merging  these  programs  with  a  large  finite-element  computer 
program  such  as  DYCAST  will.be  also  considered  and  a  procedure  for  accomplishing  the  merging 
will  be  proposed. 

PROGRAM  CALIBRATION 

Computer  modeling  of  nonlinear  transient  structural  dynamics  is  a  relatively  new  technology,  and 
standards  defming  a  “good”  structural  dynamics  computer  program  are  still  evolving.  (Occupant- 
simulation  is  a  special  type  of  structural  dynamics).  As  a  cons^uencr.,  each  new  structural 
dynamics  computer  program  must  individually  earn  acceptance  in  the  engineering  community 
before  its  calculations  will  be  utilized  by  designers. 

There  are  two  aspects  to  acceptance: 

1.  The  program  must  produce  believable  results.  That  is,  predicted  dynamics  should  appear 
reasonable  and  credible  to  the  designer,  and  the  designer  should  be  conHdent  that  the 
program  models  the  main  dynamic  effects.  To  enhance  believability,  the  program  output 
should  contain,  in  readable  form,  information  which  assists  the  designer  to  understand  the 
dynamic  events  (such  as  time  histories  of  system  forces).  Graphic  aids  are  also  helpful. 

2.  Program  accuracy  must  be  demonstrated.  That  is,  demonstratiou  of  capability  to  reasonably 
;,)redict  an  actual  test.  Achievement  of  predictive  accuracy  is  usually  a  very  difRcult  and  time 
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consuming  process  for  occupant  simulation  codes  because  of  the  nonlinear  nature  of  the 
problem  and  the  difficulty  in  obtaining  measured  values  for  input  dynamic  parameters. 

One  approach  was  applied  in  evolving  a  calibrated  level  of  performance  for  PROMETHEUS  II. 
Instrumentation  data  from  several  sled  tests  were  obtained  from  CAMI  and  physical  data  for  the 
anthropomorphic  dummies  were  obtained  (limb  weights,  measurements,  and  spring  constraints). 
These  were  systematically  refined  by  sensitivity  testing  so  that  properties  could  be  estimated 
where  measured  data  could  not  be  found. 

One  of  the  CAMI  testa  was  then  simulated  by  PROMETHEUS.  When  the  initial  simulation  did  not 
pK>vide  satisfactory  correlation  with  test  data,  the  problem  was  attacked  from  two  directions. 
First,  it  was  evident  that  the  restraint  system  model  in  PROMETHEUS  was  inadequate,  so  a  more 
sophisticated  mathematical  model  of  the  lap  belt  and  shoulder  harness  was  developed  and  added  to 
PROMETHEUS.  For  example,  the  lap  belt  was  refined  to  permit  the  slipping  associated  with 
submarining,  the  shoulder  harness  wao  refined,  and  chest/shoulder  flexibility  was  added  to 
appropriately  incorporate  hamess/body  interactions  and  slipping  of  the  harness  on  the  shoulder. 

The  second  approach,  which  was  attempted  concurrently  with  the  first,  was  to  parametrically  vary 
the  mechanical  properties  of  the  simulated  occupant  (such  as  neck  stiffness  and  damping)  in 
PROMETHEUS  simulations  and  note  the  resulting  (rends.  Parametric  variations  helped  provide  a 
“feel”  for  the  occupant  dj-namics  and  served  as  sensitivity  studies  to  identify  the  important 
dynamic  parameters.  Some  dynamic  effects  were  observed  which  were  not  influenced  by  the 
parametric  variations.  Additional  modifications  were  made  to  the  mathematical  modeling  in 
PROMETHEUS  and  parametric  evaluations  completed  to  approximate  these  effects.  Additional 
cycles  of  modeling  improvements/parametric  variations  continued  until  correlation  with  actual 
test  data  was  achieved.  The  resulting  modeling  changes  to  PROMETHEUS  were  quite  extensive: 
so  much  so  that  the  correlated  model  was  renamed  PROMETHEUS  HI.  Figure  5.1  summari.-es 
parametric  variations  and  modeling  changes  required  to  achieve  calibration.  After  calibration,  an 
independent  test  case  was  simulated  with  PROMETHEUS,  producing  good  agreement  with  actual 
test  results  involving  a  real  Part  572  dummy  in  sled  testing.  Figure  5.2  indicates  the  correlation 
finally  achieved. 

REVIEW  OF  OCCI TANT  SEMULATION  COMPUTER  PROGRAMS 

Three  occupant-simulation  models  are  reviewed  below.  These  are  a  one-dimensional  model  (the 
spring-mass  model  associated  with  the  Dynamic  Response  Index),  a  two-dimensional  model 
(PROMETHEUS  HI),  and,  a  3-D  model  (Seat-Occupant  Model:  Light  Aircraft). 

The  models  are  examined  from  two  viewpoints:  first,  as  a  tool  for  engineering  design  of  a 
seat/rebtraint  system;  and  second  as  a  possible  candidate  for  integration  into  a  large  structural 
dynamics  simulation  computer  program,  in  order  to  model  the  complete  system  (aircraft,  seat  and 
occupant)  in  a  single  simulation. 

ONE-DIMENSIONAL  MODEL-DRI 

A  one  degree  of  freedom  dynamic-response  model  of  a  human  occupant  has  been  proposed  (ref.  6). 
The  model  consists  of  a  simple  linear  spring  and  damper  and  a  point  mass.  The  spring  is  sized  by 
the  compressive  stiffness  of  the  lumbar  vertebrae  and  the  damper  is  sized  by  human  vibration 
tests. 

The  DPI  is  an  injury  scale  associated  with  U»is  modal.  The  DRI  for  a  deceleration  pulse  is  the  ratio 
of  the  peak  compressive  spring  fonie  which  occurs  when  the  model  is  excited  by  the  pulse  to  the 


weight  of  the  point  masa.  To  associate  tolerance  levels  with  the  DRI,  the  DRI  was  calculated  for 
existing  ejection  seat  designs.  Computed  DRI  values  were  plotted  against  the  percentage  of 
ejections  in  which  spinal  injury  occurred;  the  curve  thus  obtained  represents  an  approximation  of 
injury  probability  as  a  function  of  DRI. 

Both  the  simple  occupant  model  on  which  the  DRI  is  based  and  the  DRI  itself  are  very  limited  in 
application.  The  simple  model  could  only  be  u^  for  cases  in  which  the  loading  is  purely  vertical, 
that  is,  +  G2  such  as  in  ejection  seats.  It  is  obviously  not  applicable  to  model  a  restrar'ed  occupant 
imder  forward  loads;  in  this  case,  the  main  effect  is  tte  combined  stiffness  of  the  restraint  system 
and  the  occupant’s  pelvis/chest.  Even  for  -tGj  acceleration,  the  model  is  difRcult  to  use  since 
potentially  significant  effects  are  neglected,  such  as  the  effect  of  seat  pan  stiffness. 

The  DRI  is  ba^  on  a  model  which  does  not  adhere  dosely  to  the  actual  dynamics  of  an  ejection. 
Seat  pan  stiffness  is  not  considered  nor  is  distribution  of  body  mass  along  the  spine  nor  the  weight 
of  the  occupant.  Thus  the  DRI  can  be  expected  to  pnxiuce  useful  data  only  in  crashes  which  are 
similar  to  a  seat  ejection— that  is  purely  +G2  acceleration,  seat  pan  stiffness  similar  to  the 
stiffness  of  a  fighter  pilot’s  seat  and  the  occupant  ti^tly  restrained. 

The  U.S.  Army’s  Aircraft  Crash  Survival  Design  Guide  says  of  the  DRI: 

“Although  the  Dynamic  Response  Index  (DRI)  iathe  only  model  correlated  extensively  for. 
ejection  seat  spinal  injury  prediction,  it  has  serions  shortcomings  for  use  in  accident  analysis. 
It  assumes  the  occupant  to  be  well  restrained  and  erect,  so  that  the  loading  is  primarily 
compressive,  with  insigniBcant  bending.  Although  such  conditions  may  be  assumed  for 
ejection  seats,  they  are  less  probable  for  helio^ter  crashes,  in  which  an  occupant  may  be 
leaning  to  either  side  for  better  visibility  at  the  time  of  impact.  Further,  the  DRI  was 
correlated  for  ejection  pulses  of  much  longer  duration  than  typical  crash  pulses. 

“A  more  detailed  model  of  the  spinal  column  would  yield  more  realistic  results,  but  injury 
criteria  for  the  more  complex  responses  have  yet  to  be  developed.  Consequently,  the  DRI  is 
not  recommended  as  the  criterion  for  use  in  designing  crashwoi^hy  seats.” 

REVIEW  OF  PROMETHEUS  in  AND  SOM.LA 

The  following  discussion  reviews  and  compares  the  2-D  program  PROMETHEUS  III  (ref.  8)  and  the 
3-D  Seat-Occupant  Model:  Light  Aircraft  (SOM-LA)  (ref.  7). 

PROMETHEUS  HI  was  developed  at  Boeing  in  a  soles  of  applications  for  different  purposes, 
starting  from  the  Dynamic  Science  program  SIMULA.  The  focus  of  PROMETHEUS  m,  has  been 
on  accurate  mpdeling  of  the  occupant  and  restraint  system.  PROMETHEUS  m  has  since  been  used 
extensively  to  develop  data  for  assisting  in  engineenng  design  decisions.  SOM-LA  development 
was  sponsored  by  the  FAA  through  a  series  of  contracts  with  various  companies  and  universities. 
Elmphasis  in  SQM-LA  development  has  been  on  the  detailed  seat  model.  An  improved  version  of 
SOM-LA,  termed  MSOM-LA  was  completed  under  number  pTFA03-80-(M)0098.  The  occupant 
model  has  been  upgraded  in  MSOM-LA. 

DEVELOPMENT  OF  BASIS  OF  EVALUA-nON 

Occupant-simulation  using  PROMETHEUS  in  computer  program  has  been  developed  and 
demonstrated  sufficiently  to  be  used  in  the  engineering  design  process.  This  experience  is  drawn 
upon  to  establish  criteria  for  continued  evaluation  of  occupant-simulation  computer  programs. 


Design  questions  for  which  PROMETHEUS  III  simulations  provided  engineering  data  were  quite 
vari^:  the  common  denominator  being  relative  occupant  safety.  Due  in  part  to  the  limitations  of 
existing  human  tolerance  data,  it  is  rarely  possible  to  predict  with  certainty  whether  injury  would 
have  occurred  in  a  given  crash  on  the  basis  of  a  computer  simi.’ation.  Similar  questions  may  also  be 
unanswered  in  dummy  tests.  In  moat  cases,  computer  simulation  is  the  only  practical  method  for 
obtaining  design  data  for  specific  questions,  and  on  a  timely  basis.  To  be  usable  for  design,  an 
occupant-simulation  computer  program  requires  two  major  attributes. 

First  it  must  be  able  to  model  a  general  structure  (not  just  a  seat),  and  be  able  to  model  contact 
between  the  occupant  and  any  part  of  the  structure.  (For  example,  impact  of  an  occupant  with  the 
seat  ahead). 

The  second  feature  is  that  the  program  must  provide  data  which  may  be  used  for  estimating 
comparative  injury  potential.  This  means  that: 

1.  The  program  must  have  been  calibrated  by  predicting  test  data  (preferably  from  live  human 
tests). 

2.  Time  histories  of  forces  acting  on  individual  body  segments  i  f  the  occupant  model  should  be 
printed  and/or  charted. 

3.  Time  histories  of  torques  acting  in  joints  of  the  occupant  (e.g.,  the  elbow)  should  be  printed 
and/or  charted. 

4.  Time  varying  internal  loads  acting  on  flexible  body  segments  (such  as  the  lumbar  spine) 
should  be  printed  and/or  charted. 

Of  course,  the  standard  software  features  relating  to  ease  of  program  use  are  also  desirable— that 
is,  ease  of  input,  automatic  data  checking,  legibility  of  output,  and  availability  of  graphic  aids. 

COMPARATIVE  EVALUATION  OF  PROMETHEUS  in  AND  SOM  LA 

Figures  5.3,  5.4  and  5.5  constitute  checklists  of  features  needed  for  engineering  design  usage  of 
occupant-simulation  computer  programs.  Checklist  items  were  obtained  pragmatically  from 
experience  in  using  PROMTHEUS  HI  to  develop  design  data.  The  amount  of  use  of  PROMETHEUS 
m  justified  incorporation  of  most  checklist  items  into  this  program;  consequently  the  lists  serve 
mainly  to  indicate  desirable  improvements  in  SOM-LA.  The  main  improvement  in  MSOM-LA  is  an 
improved  seat,  capable  of  modeling  energy  absorption.  The  occupant  model  has  also  been  improved 
by  the  incorporation  of  a  flexible  segment  representing  the  lumbar  spine. 

The  major  “deficiency”  in  PROMETHEUS  m  is  that  it  has  only  been  possible  to  perform  limited, 
exploratory  calibration  against  live  human  test  data  and  for  similar  reasons  limited  exploration  of 
seat  model  dynamics.  Added  calibration  of  this  type  is  desirable.  A  benefit  of  2-D  modeling  is  that 
mechanisms  within  the  2-D  PROMETHEUS  III  model  are  easier  for  the  analyst  to  comprehend  > 
than  those  within  a  3-D  model,  giving  an  advantage  for  initial  use  of  a  2-D  model  in  calibration 
efforts.  Other  than  development,  which  may  be  required  to  achieve  such  calibration,  further  model 
evolution  must  consider  limitations  intrinsic  to  the  2-D  nature  of  the  model  and  distinguish  the 
conditions  for  using  a  2-D  or  a  3-D  model.  Of  course,  current  uncertainties  in  the  level  of  human 
tolerance  to  transient  loads  are  a  constraint  that  must  be  observed  for  either  2-D  or  3-D  models. 


Feature 

Prometheus  II' 

SOM-LA 

MSOM-LA 
.  (Note  1) 

1  Occupant 

Segment  masses,  length 

I.D 

I.D 

I.D 

inertias,  c.g.'s. 

Mechanical  properties 

1.0 

D 

D 

of  joints 

II  Restraint  system 

Mechanical  properties  of 

I.D 

1 

1 

lap  belt 

Mechanical  properties 

I.D 

1 

1 

of  harness 

III  Seat 

Geometry 

I.D 

1 

1 

Construction 

I.D 

D 

1 

Mechanical  Properties 

I.D 

1 

1 

IV  Crash  Pulse 

I.D 

1 

1 

VI  Interactive  (conversational) 

X 

- 

input  feature 

I  ==  Input,  0  =  Default  (i.e.,  supplied  by  program) 


Note  1 ;  It  is  assumed  that  the  MSOM-LA  input  is  essentially  the  same  as  the  SOM-LA  input. 

Figure  5.3-Comparison  of  Program  Input  Features 


Feature 

Prometheus  III 

SOM-LA 

MSOM-LA 
(Note  1) 

1  Occupant 

Segment  cartesicn  position, 

X 

X 

X 

velocity,  acceleration 

Segment  angular  position, 

X 

_ 

velocity,  deceleration 

Forces  on  segments 

X 

_ 

Joint  torques 

X 

- 

Spinal  loads 

X 

- 

II  Restraint  system 

Lap  belt  load 

X 

X 

X 

Harness  load 

X 

X 

X 

Belt  Slip 

X 

- 

- 

III  Seat 

Cushion  forces 

X 

■ 

X 

X 

Reactions 

X 

X 

X 

Nodal  forces 

X 

- 

Element  forces 

X 

- 

- 

IV  Crash  pulse 

X 

X 

X 

V  Printer  plots 

Acceleration  traces 

X 

X 

X 

(vs  time) 

Snapshots  of  victim/seat 

X 

Locus  of  segment  e.g.'s  as 

- 

X 

X 

Functions  of  time 

Note;  It  is  assumed  that  the  output  features  of  SOM-IA  and  MSOM-LA  are  essentially  the  same. 


Figure  5.4^Cornparison  of  Program  Output  Faetures 
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Feature 

Prometheus  III 

SOM-LA 

MSOM-LA 

1  Occupan* 

Spinal  articulation 

5  links 

4  links 

5  lirrks 

Flexible  lumbar  link 

X 

- 

X 

Flexible  cervical  link 

X 

X 

X 

Automatic  initial  position 

X 

X 

X 

Generation 

Compressible  chest,  pelvis. 

X 

- 

II  Restraint  system 

Realistic  friction 

X 

- 

- 

Free  to  slide  on  victim 
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According  to  the  SOM-LA  developer.  Or.  David  Laananen,  this  teature  does  not  work  in  SOM-LA  but  does  in 
MSOM-LA. 

’**  Preliminary  calibration  accomplished. 

Figure  5.5-Comparison  of  Basic  Modeling  Features 
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SOM-LA  could  benefit  from  both  human  data  calibration  and  model  improvement  (from  the  standpoint 
of  usefulness  for  engineering  design).  There  are  two  major  modeling  deficiencies  —  the  restraint 
system  model  and  the  difficulty  of  modeling  nonstandard  ^ts  and  structiue.  Both  represent  difficult 
modeling  problems  in  a  3-D  environment,  and  methods  developed  to  simulate  these  features  in  the 
2-D  PROMETHEUS  in  computer  program  can  not  be  readily  generalized  to  three  dimensions. 

SOM-LA  has  a  very  primitive  restraint  system  model.  Restraining  belts  are  pinned  to  the  body,  so 
realistic  modeling  of  a  restrained  occupant  is  impossible.  SOM-LA  also  has  limited  flexibility  in  the 
type  of  restraint  system  which  may  he  modeled.  Nonstandard  configurations,  such  as  restraint 
system  with  crotch  or  thigh  straps  could  not  be  simulated.  In  addition,  harness  friction  is 
implemented  incorrectly  (friction  is  crudely  and  incorrectly  simulated  by  reducing  tension  in  the  strap 
segment  running  from  lap  belt  to  shoulder  by  12%).  Another  serious  defect  is  that  chest 
compressibility  (which  effects  shoulder  harness  loads)  is  not  modeled. 

Accordingly,  this  simple  restraint  system  model  is  inadequate  for  engineering  design  use  for 
evaluating  restraint  system  performance.  It  introduces  uncertainty  into  predicted  body  loads  and 
accelerations,  since  dynamic  performance  of  the  restraint  system  is  one  of  the  primary  sources  and 
conduits  of  transmission  of  crash  loads  to  the  occupant. 

The  second  major  SOM-LA  deficiency  is  the  limited  simulation  of  structural  configurations.  It  is 
possible  that  more  generality  is  available  in  MSOM-LA.  In  addition,  it  is  desirable  that  MSOM-LA  be 
capable  of  simulating  contact  between  the  occupant  and  an  arbitrary  structure  (e.g.,  the  back  of  the 
seat  ahead).  This  finite-element  “contact  problem”  is  difficult  and  is  the  subject  of  current  research 
(e  g.,  ref.  9). 

In  addition  to  these  research  improvements,  several  improvements  would  enhance  usability  of  the 
code: 

1.  (^Iculate  and  display  time  histories  of  loads  acting  on  the  occupant  (e.g.,  spinal  loads, 
segment  forces,  joint  torques). 

2.  Improve  the  algorithm  for  computation  of  joint  torque. 

3.  ’  Add  printer  plot  “snapshots”  of  seat  and  occupant  for  credibility  and  for  appraising  occupant 

location  at  selected  times  (two  views)  for  comparison  with  slow  motion  movies. 

INCORPORATION  OF  SOM-LA  INTO  LARGE  CRASH  DYNAMICS  CODE 

It  may  become  necessary  to  predict  . dynilmic  interactions  of  occupant  and  floor  structure.  Simple 
predictions  may  be  possible  ^th  SOM-LA.  Action  has  ,  been  started  within  the  government  ,  to 
combine  the  3-D  SOM-LA  with  a  large  finite-element  computer  program  (e.g.,  the  3-D  DYCAST)  in 
order  to  model  an  aircraft  crash  in  a  single  simulation  to  more  properly  couple  the  dynamics  of 
occupants  and  aircraft  structure.  To  accomplish  this,  it  is  suggested  that  the  occupantlrestraint 
model  be  extracted  from  the  SOM-LA  occupant/restraint/seat  model  and  packag^  as  a  super¬ 
element  The  occupant  super  element  would  then  he  inserted  into  the  large  finite-element  programs 
as  a  module.  Although,  as  noted,  improvements  in  the  SOM-LA  restraint  system  model  are  needed  to 
model  occupant  dynamics  accurately.  The  existing  SOM-LA  occupant/restraint  system  model  would 
probably  be  adequate  fo.  'he  pui^  jses  of  calculating  the  grqss  dynamics  of  the  seat  system. 

The  finite-element  code  would  be  utilised  to  mode)  the  seat  —  that  is,  the  SOM-LA  seat  model  would 
not  be  used.  (This  presumes  the  development  of  a  general  contact  model  to  simulate  forces  acting 


between  the  seat  and  occupant.)  The  contact  model  would  be  used  to  simulate  seat  cushions.  This 
concept  has  three  advantages: 

1.  Simulation  of  multiple  occupants  becomes  possible  (e.g.,  a  “triple”  seat). 

2.  Synchronization  of  the  numerical  integration  schemes  (i.e.,  the  procedures  for  solving  the 
equations  of  motion  as  f’onction  of  time)  in  SOM-LA  and  the  finite-element  program  is  not 
required.  The  integration  scheme  of  the  finite-element  program  is  utilizeo  for  both  occupant(s) 
and  structure. 

3 .  The  capability  of  the  finite-element  computer  can  be  employed  to  model  general  seat  designs. 

It  would  be  possible  to  use  the  large  fmite-eiement  program  to  model  the  occupant.  The  advantage  of 
the  super-element  is  that  occupant  modeling  requires  features  that  are  not  needed  in  general  finite- 
element  modeling  of  structures,  such  as  limits  on  angular  motion  of  Limbs  at  joints.  Moreover, 
occupant  modeling  is  specialized,  and  correct  mechanical  parameters  describing  the  occupant  are 
not  widely  known  (in  some  cases  supportive  data  are  not  known  at  all  and  parameters  must  be 
infeired  by  parametric  sensitivity  testing).  Thus  it  would  be  difficult  for  a  nonspecialist  to  construct  an 
accurate  model. 

Additional  effort  would  be  required  to  make  the  occupant  super-element  work;  provision  for 
transmitting  input  data  to  the  super-element  and  obtaining  printout  of  detailed  occupant  time  histories 
is  required.  In  addition,  graphics  output  from  the  finite-element  program  (if  graphics  post  processing 
is  available)  must  be  adjtuted  to  draw  the  occupants)  in  addition  to  the  structure. 

The  same  procedure  could  be  used  to  lift  the  2-D  occupant  model  from  PROMETHEUS  III  if  a  2-D 
crash  simulation  were  employed.  However,  there  is  little  beneHt  to  be  obtained  from  using  such  a 
model  in  an  overturning  or  cartwheeling  light  aircraft  where  violent  interactions  of  all  three  dimensions 
of  motion  would  be  occurring. 


HUMAN  IMPACT  TOLERANCE 

In  simulating  the  crash  of  a  vehicle  with  human  occupants,  either  by  actual  test  or  computation, 
the  capability  of  estimating  the  degree  of  injury  sustained  by  the  occupant  is  highly  desirable. 
Various  scales  have  been  proposed  for  this  purpose  and  these  are  evaluated  below.  At  present, 
skeletal  fracture  tolerances  provide  the  best  means  for  predicting  injury  (including  head  injury). 

Human  injury  is  a  complicated  biological  process;  causative  physical  mechanisms  are  often  not 
well  understood,  and  consequently,  traditional  engineering  methods  are  difficult  to  apply. 
Physiological  changes  are  also  known  to  occur  in  response  to  crash  loading  (e.g.,  change  in  pulse 
rate),  further  complicating  analysis. 

To  fulfill  the.  researcher's  need  to  quantify  injury,  a  number  of  injury  scales  have  been  devised. 
These  scales  are  based  on  clinical  data  or  physical  measurement,  such  as,  head  acceleration  history. 
These  scales  are  generally  intended  to  estimate  physiological  trauma  rather  than  skeletal  damage 
The  better  known  of  these  scales  will  be  described. 

A  note  of  caution  is  appropriate  at  this  point;  currently  existing  injury  scales  represent  some  form 
of  empirical  correlation  between  injury  and  measured  quantities.  Correlation  is  not  directly  based 
on  the  mechanism  which  actually  causes  injury;  rather,  statistical  correlation  with  parameters 
considered  likely  to  be  implicated  is  established.  Use  of  an  injury  scale  outside  the  conditions  for 
which  correlation  was  established  is  risky.  Moreover,  there  is  always  uncertainty  in  the  accuracy  of 
the  basic  data  since  injury  data  cannot  be  developed  from  experiments  with  live  people,  but  must 
be  inferred  from  cadaver  or  animal  testa. 


Differences  between  individuals  further  complicate  matters-  Despite  these  limitation,  injury  scales 
provide  a  method  for  assessing  injury  in  a  crash  simulation.  Such  scales  provide  a  rational 
(although  possibly  inscciurate)  means  for  comparing  simulation  results. 

In  contrast  to  physiological  damage  to  organs,  prediction  of  skeletal  injuhes  is  amenable  to 
ordinary  engir  sering  methods.  Mechanical  properties  of  bone  have  been  determined 
experimentally.  Standard  engineering  analysis  techniques  might  be  employed  to  determine  the 
extent  of  bone  damage  in  a  particular  situation.  Although  there  are  differences  in  bone  strength 
and  size  between  individuals,  and  live  human  bone  cannot  be  tested,  extensive  theoretical 
knowledge  of  structural  dynamics  permits  much  greater  confidence  in  the  accuracy  of  such 
computations  than  in  the  accuracy  of  injury  indict. 

Bone  damage  is  only  part  of  injuries,  and  not  necessarily  the  most  serious  part.  Concussion,  for 
example,  can  occur  withouv.  accompanying  skull  fracture.  Moreover,  the  accuracy  of  engineering 
analysis  of  the  skeleton  depend  upon  accurate  computation  of  forces  acting  on  the  skeleton,  such 
as  restraint  system  and  contact  forces.  Contact  forces  are  particularly  difficult  to  obtain,  since  the 
contacting  portion  of  the  human  body  generally  has  irregular  geometry  and  the  mechanical 
properties  of  the  bone,  flesh  and  contacted  structure  all  interact  to  determine  the  dynamically 
varying  force  acting  on  the  skeleton.  Occupant-simulation  models  discussed  herein  (e.g., 
PROMETHEUS  HI,  SOM-LA)  do  nov  model  the  skeleton  in  sufficient  detail  to  accurately  predict 
bone  fracture.  However,  structural  loads  are  calculated  in  these  programs  (e.g.,  lumbar  axial  load), 
and  these  provide  a  rough  measure  of  the  likelihood  of  skeletal  damage.  Chapon  (ref.  10)  gives  an 
excellent  summary  of  experimentally  determined  fracture  loads. 

Injury  scales  can  be  grouped  into  three  classes:  (1)  scales  based  on  clinical  evaluation  of  actual 
injuhes,  (2)  ‘Vhole-body”  scales,  and  (3)  scales  developed  to  predict  a  particular  type  of  injury. 

The  Arst  group  of  scales  is  intended  to  quantify  clinical  diagnosis  of  the  injuhes  sustained  by  a 
particular  person.  This  provides  a  yardstick  for  comparing  the  seventy  of  injuhes  occurhng  in 
different  accidents  even  though  the  injury  mechanisms  may  be  quite  different.  Such  scales  are 
necessarily  subjective;  their  main  use  is  in  accident  investigation.  A  well  known  scale  of  this  type  is 
the  Abbreviated  Injury  Scale  (AIS),  as  defined  in  reference  11.  Obviously,  scales  based  on  clinical 
diagnosis  are  of  very  limited  use  to  the  modeler. 

I 

Wliole-body  tolerance  scales  are  based  on  empiheal  observations,  sometimes  including  the  results 
of  inimal  tests.  These  scales  attempt  to  assess  “sunrivability”  based  on  a  gross  deschption  of  the 
im  Met  deceleration  pulse  using  parameters  such  as  peak  deceleration,  duration  of  deceleration  and 
oniiet  rate.'  A  difficulty  in  using  published  whole-body  scales  is  that  authors  often  do  not 
distinguish  between  peak  deceleration  and  average  deceleration  (which  may  of  course,  be  quite 
different).  These  scales  refer  to  the  crash  load  delivered  to  the  seat,  and  do  not  directly  consider 
0G(  upant/restraint  system  response.  Separate  scales  are  available  for  different  loading  conditions 
(e.|(.,  Gj(,  -Gj,  G2),  but  no  provision  is  made  for  combined  loading  (such  as  simultaneous  -G^  and  G^; 
deteleration).  V^^ole-body  scales  might  be  useful  in  early  preliminary  aircraft  design;  they  are  of 
no  use  in  detailed  occupant  models  such  as  PROMETHEUS  m  or  SOM-LA. 

Injury  ucales  in  the  third  group  are  intended  to  estimate  damage  of  a  particular  type.  DRI  is  an 
eximple  of  this  type  of  scale.  The  DRI  is  intended  to  predict  injury  to  the  lumbar  spine  during 
veitit^  (Gj)  accelertion. 

CONCUSSION  SCALES 

Several  widely  publicized  scales  in  the  third  group  with  potential  for  use  with  occupant  models  are 


designed  to  predict  concussion.  The  mechsnism  causing  omcussion  is  not  well  understood, 
although  there  has  been  extensive  investigation.  It  is  known  that  concussion  can  result  from  either 
linear  acceleration  (e.g.,  from  hesd  impact)  or  else  from  rotaticHial  acceleration  (i.e  .  whiplash).  To 
date,  most  investigations  have  focused  on  either  linear  or  rotational  acceleration.  Combined 
effects  have  also,  been  investigated,  but  data  is  scarce. 

CONCUSSION  CAUSED  BY  TRANSLATIONAL  ACCELERATION 

A  widely  used  measure  of  human  tolerance  to  linear  acceleratioo  is  the  Wayne  State  Curve  (WSC) 
(fig.  5.6  and  ref.  12).  The  WSC  predicts  that  ecceleratioi.  pulse  magnitude  is  more  important  than 
pulse  duration  in  causing  concussion. 

The  following  description  of  derivation  of  the  WSC  is  paraphrased  from  Hodgson,  et  al.  (ref.  1 3)..  The 
basic  exp.jrimental  work  on  which  the  WSC  deoends  was  a  study  of  concussion  on  mongrel  dogs 
(refs.  14  and  15).  Deceleration  pulses  of  systematically  varied  magnitude  and  duration  were  applied 
to  the  brains  of  72  dogs,  and  a  concussion  tolerance  curve  for  the  spedss  was  then  obtained.  It  was 
postulated  that  the  same  cturve  shape  would  be  valid  for  humans.  Cadaver  skull  fracture  data  was 
employed  to  determine  the  shape  of  the  human  curve  fcr  pulses  less  than  10  ms  in  duration  (clinical 
eifperience  indicates  that  concussion  normally  accompanies  skull  fracture).  The  long  pulm  end  of 
the  WSC  (duration  greater  than  100  ms)  was  estimat^  from  occeieration  sled  rides  of  Stapp  and 
other  volunteers  (ref.  16).  The  intermediate  range  of  tne  curve  was  estimated  from  cadaver  drop 
tests  onto  automobile  panels. 

It  should  be  noted  that  data  on  which  the  WSC  is  based  utilize  a  single  acceleration  pulse;  multiple 
blows  are  not  used  and  influence  of  oulse  shape  is  not  considered.  Moreover,  the  shape  of  curve  is 
not  well  supported  by  experimental  evidence  for  pulse  durations  greater  than  10  ms. 

Newman  (ref.  12)  reports,  regarding  the  Wayne  State  Curve,  The  vaUdity  and  usefulness  of  this 
tolerance  curve  have  been  questioned  on  a  number  of  grounds  including: 

1.  The  ordinate’s  effective  acceleration  was  poorly  defined.  Patrick,  et  al.  (lof.  17)*,  had 
stated:  The  ordinate  is  Effective  Acceleration  which  is  based  on  a  modiHed  triangular  pulse 
in  which  the  effective  acceleration  is  somewhat  greater  than  half  the  peak  value.  Therefore, 
triangular  or  sinusoidal  pulses  of  equal  area  and  higher  peak  magnitude  are  in  accord  with 
the  experimental  evidence  from  which  the  Tolerance  Curve  is  derived.’  Later  (ref.  IS)  it  was 
stated:  ‘Effective  acceleration  k  computed  by  dividing  the  area  under  the  acceleration  time 
record  by.  the  time.  A  judicious  analysis  , of  the  geometrical  shape  of  the  curve  is  impottant 
For  instance,  high  amplitude  spikes  of  short  duration  (less  than  1  millisecond)  should  be 
disregarded.’  More  recently,  (reL  19)  effective!  acceleratioa  has  been  equated  exactly  to  the 
time  averaged  acceleration  over  the  duration  of  the  pulse.” 

2.  The  head  impact  data  is  not  applicable  to  blows  other  than  those  to  which  the  experimental 
animals  and  cadavers  were  subject  To  quote  Gurdjian,  et  al.  (ref.  20);  Tt  should  be  pointed 
out,  however,  that  care  should  be  taken  in  using  a  tolerance  curve  of  this  nature.  It  is  entirely 
possible  that  a  curve  of  the  same  shape,  but  having  different  \’alues  for  the  acceleration 
magnitude,  could  very  well  be  shifted  up  or  down  depending  upon  the  point  of  impact  and  the 
blow  direction.’  Stalnaker,  et  al.,  (refs.  21  and  22)  have  conOrmed  that  there  are  significant 
differences  in  the  response  of  human  and  monkey  heads  to  lateral  and  longitudinal  impacts.” 

3.  'Because  the  WSC  was  based  on  measumd  acceleratioo  time  histories  of  a  point  on  the  head 
essentially  opposite  the  forehead  blow  location;  skull  vibration  may  have  had  a  significant 
effect  on  the  apparent  head  acceleration.  Hodgson  and  Patrick  considered  this  question  in 

*  Reference  numbers  have  been  converted  to  corrMpond  to  the,  numbering  sequence  of  this 
document. 


109 


1968  (ref.  23)  and  it  is  now  customary  to  use  two  biaxial  accelerometers  mounted  to  the  side 
of  the  head  (ref.  13).  As  suggested  by  Mertz  (ref.  24),  assuming  rigid-body  mechanics,  the 
acceleration  of  the  center  of  gravity  of  the  head  can  then  be  determined. 

4.  “The  WSC  has  never  been  verified  for  living  human  beings,  although  recent  indirect  efforts 
through  accident  simulation  (ref.  25)  have  been  attempted.” 

Several  injury  indices  have  been  suggested  based  on  the  Wayne  State  Curve.  These  are  the  Head 
Severity  index  (ref.  26),  the  Head  Injury  Criterion  (refs.  12  and  27)  and  the  J  tolerance  (ref.  28).  All 
three  tolerances  agree  roughly  with  the  Wayne  State  Curve  for  short  duration  frontal  head 
impacts  (i.e.,  10  ms  duration,  half  sine  wave  shape).  The  criteria  give  different  results  for  multiple 
pulses  or  irregular  pulses,  and  the  relative  merits  are  hotly  debated.  However,  little  clinical 
evidence  is  available  to  indicate  whether  any  of  the  scales  (or  indeed  the  Wayne  State  Curve)  is 
valid  for  these  conditions. 

The  widely  used  Swearingen  diagram  of  acceleration  tolerance  of  the  facial  bones  (figure  5.7  and 
ref.  29)  actually  represents  fracture  data  under  dynamic  loading.  The  accelerafion  tolerances  given 
should  be  multiplied  by  the  head  weight  to  obtain  fracture  tolerance.  Thus  the  fracture  tolerance 
of  30  G  given  for  the  nose  means  that  the  nose  will  fracture  when  the  nose  is  struck  with  sufficient 
force  to  impact  30  G  acceleratioti  to  the  whole  head,  which  would  be  a  force  of  300 11s.,  assuming  a 
ten  pound  head  weight.  It  does  not  mean  that  whenever  the  head  is  accelerated  to  30  G  (e.g., 
through  whiplash)  that  nose  fracture  occurs. 

CONCUSSION  CAUSED  BY  ROTATIONAL  ACCELERATION 

Concussion  can  be  induced  by  head  acceleration  pressure  in  contrast  to  impact  loads;  a  tentative 
estimation  of  human  tolerance  to  rotational  acceleration  was  made  by  Omaya,  et  al.  (ref.  30),  A 
tolerance  curve  was  experimentally  determined  for  rhesus  monkeys,  and  the  humrn  tolerance 
curve  was  inferred  from  monkey  curves  by  scaling  the  acce’eration  axis  by  where  r  is  the  ratio 
of  the  weight  of  the  rhesus  monkey  brain  weight  to  the  tiiunan  brain  weight  (fig.  5.8).  Omaya,  et  al. 
stated  that  additional  experimental  confirmation  is  required  before  use  of  the  curve  is  justified.  Ak 
far  as  can  be  determined,  no  confirmation  data  has  been  published  to  dote.  Thus  figure  5.3  must 
remain  tentative. 

STRUCTURAL  MODELING  COMPUTER  PROGRAMS 
INTRODUCTION  AND  R*!COMMENDATION 

Impact  dynamics  of  a  real  crash  involving  complicated  structural  design  are  too  complex  for 
manual  an^ysis,  however,  modeling  methods  offer  an  eventual  capability  that  could  provide  a 
simulation  of  all  dynamic  interactions. 

Simulation,  may  be  by  analytical  models,  scale  models,  comptiter  models,  and  full-scale  testa  in 
order  to  provide  both  observation  of  complex  interactions  and  a  rational  basis  for  the  sequencing 
of  events,  ’oads,  and  modes  of  fai!u'%. 

Numerous  computer  simulation  models,  in  particular,  are  being  developed  for  use  in  simulation 
evaluations.  Some  are  being  developed  for  support  of  preliminary  design  studies,  others  for  mote 
sophisticated  uses.  The  four  main  classes  of  models  that  are  used  include: 


I  1  1  J  1  J  1  1  J  1  1  1  i  1  ,1  J 
0  1  2  3  4  5  6  7  8  9  10  11  12  13  14  15 


Note:  The  hurran  tolerance  scale  was  obtained  by  multiplying  the  rhesus 
monkey  scale  by  (Mhuman''^monkey)-^^ 
regarded  as  an  untested  hypothesis  at  this  time. 


Figure  5.8~Cerebrat  Tolerance  to  Rotational  Acceleration  for  Rhesus  Monkeys 
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Generalized  spring  mass  models 

2.  Frame  type  models 

3.  Hybrid  models 

4.  Finite-element  models 

Spring-mass  models  and  frame  models  use  a  very  simple  model  of  the  structure  to  estimate  crash 
behavior.  Frame  models  differ  from  spring-mass  models  in  that  beam  elements  are  employed  in 
modeling,  in  addition  to  springs  and  point  masses.  Hybrid  models  use  static  test  data  in 
conjunction  with  a  spring-mass  model  or  frame  model  to  predict  dynamic  behavior  of  a  structure. 
Finite-element  approach  uses  more  formal  approximation  approaches  for  more  discrete  definition 
of  structural  representation  and  properties.  Finite-element  models  tend  toward  increasing 
complexity  and  computational  cost.  However,  none  of  the  modeling  is  totally  free  of 

testing,  requirements  and  analytical  judgment.  The  reason  is  the  exuemely  complex  process  for 
vehicle  structure  deformation  under  crash  loading,  which  involves: 

1.  Transient,  dynamic  behavior 

2.  Complicated  framework  and  shell  assemblies 

3.  Large  deflections  and  rotations 

4.  Extensive  plastic  deformations 

A  number  of  computer  programs  have  been  developed  to  simulate  nonlinear  dynamic  response  of 
structures.  These  programs  are  categorized  as  “hybrid”  and  “purely  mathematical  finite-element 
models.”  Brief  descriptions  of  some  of.  these  programs  are  given,  and  three  of  the  programs 
(KRA.SH,  DYCAST  and  ADINA)  are  evaluated  in  more  depth.  It  is  concluded  that  none  of  the 
programs  has  all  needed  features. 

HYBRID  VS.  PURELY  MATHEMATICAL 

Workers  investigating  the  behavior  of  structures  in  crash  situations  often  categorize  analysis 
methods  as  “hybrid”  or  “purely  mathematical.”  A  definition  of  these  terms  is  given  in  Winter,  et  al. 
(ref.  31). 

“Hybrid  —  A  combined  experimental  and  mathematical  method,  such  as  the  lumped 
mss/spring  method,  in  which  the  structure  is  divided  into  a  number  of  relatively  large 
sections  or  assemblies  that  are  usually  idealized  as  beam/springs  whose  deformation 
characteristics  are  found  from  static  deformation  tests  or  separate  engineering  analyses. 
Structural  mass  is  lumped  with  nonstructural  masses  at  the  beam  ends,  and  the  equations  of 
motion  of  the  mass  points  are  solved  numerically. 

“Purely  mathematical— As  in  the  finite-element  method,  in  which  structure  is  divided  into  its 
individual  natural  components  (beams,  stringer,  skin  panels,  etc.)  which  aie  then  subdivided 
into  appropriate  structural  units  called  elements.  The  deformation  characteristics  of  each 
component  are  calculated  theoretically  from  its  material  stress/strain  curve  and  its  changing 
shape  and  position  in  the  structure.  Tlie  structural  mass  is  placed  at  nodes  at  each  element 
boundary  and  is  therefore  distributed  throughout  the.  structure.  The  equations  of  motion  of 
the  elements  are  then  solved  numerically.” 
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Hybrid  technique  permits  use  of  simpler,  less  expensive  structural  models.  A  hybrid  model  is 
particularly  useful  when  many  simulations  of  the  same  structure  are  to  be  made.  Occupant  models 
in  occupant  crash  simulation  (e.g.  PROMETHEUS  HI,  SOM-LA,  Articulated  Total  Body  (ATB))  are 
almost  always  hybrid  models— for  example,  the  lumbar  spine  is  represented  as  a  single  beam 
rather  than  an  assemblage  of  vertebrae,  discs,  and  ligaments. 

In  fact,  purely  mathematical  methods  require  considerable  engineering  judgement,  even  art,  to  use 
successfully;  the  distinction  between  hybrid  and  purely  mathematical  is  more  nearly  a  matter  of 
degree  than  a  real  distinction. 

Researchers  in  the  field  note  that  both  approaches  are  necessary.  Hayduk,  et  al.  (ref.  32)  conclude, 
after  comparing  the  hybrid,  program  KRASH  with  the  purely  mathem.stical  Rnite^lement 
programs  ACTION  and  DYCAST: 

“A  hybrid  computer  program  (KRASH)  and  two  finite-elment  computer  programs  (A(7nON 
and  DYCAST)  have  been  used  to  analyze  a  section  of  a  twin-engine,  low-wing  airplane 
subjected  to  a  8.38  mis  (27.5  ft/s)  vertical  impact.  A  vertical  drop  test  experiment  was 
performed  at  the  NASA  Langley  Impact  Dynamics  Research  Facility.  The  results  of  the 
analyses  demonstrated  the  capability  of  all  three  computer  programs  to  quantitatively 
simulate  the  significant  dynamic  response  of  aircraft  structures  under  impact  loading.” 

“Because  of  the  variation  in  complexity  of  the  KRASH  lumped-mass  model  (177  DOF 
(degrees  of  freedom))  and  the  ACTION  (336  IXIF)  and  DYCAST  (493  DOF)  finite-element 
models  and  solution  methods,  there  were  two  orders  of  magnitude  difference  in  analysis  cost. 
Consequently,  the  lumped-mass  hybrid  approach  should  be  used  in  conjunction  with  the 
finite-element  approach,  the  two  approaches  complementing  each  other.  The  lumped-raass 
hybrid  approach  can  be  used  to  evaluate  gross  vehicle  response,  desi^oi  trends,  structural 
design  imd  impact  parameters  studies,  and  gross  energy  dissipation.  The  Hnite-element 
approach  should  be  used  for  analysis  of  designs  where  the  detailed  behavior  of  individual 
components  are  critical,  for  obtaining  detailed  loads  required,  for  input  to  other  analyses, 
such  as  a  lumped  mass-hybrid  technique  or  an  occupant  simlulator,  and  for  detailed  stress 
analysies  in  sizing  of  structural  components.” 

Cronkhite,  et  al.  (ref.  33)  agree  with  the  Hayduk  conclusions.  Cronkhite  states; 

“Computer  analysis  methods  are  still  being  verified  for  metal  structures,  while  composites 
will  need  special  treatment  because  of  their  low  strain-to-failure  characteristics.  At  present, 
both  the  hybrid  (KRASH)  and  finite-element  (DYCAST)  structure  mash  anblyais  methods  are 
needed.  The  hybrid  type  of  analysis  is  useful  for  preliminary  design  analysis  and  .  for 
parametric  studies  of  the  entire  airframe.  The  finite-element  analysis  method  has  the 
potential  for  detailed  structure  analysis  directly  from  drawings  and  may  be  used  to  develop 
inputs  to  the  hybrid  type  of  analysis.  The  main  problem  with  a  hybrid  methiid  is  obtaining 
structure  inputs  to  the  coarse  math  model.  Flnite-elnnent  methods,  being  a  complete 
analysis,  need  validation  by  test” 

DESCRIPTION  OF  NONLINEAR  DYNAMICS  COMPUTER  PROGRAMS 

Cronkhite,  et  al.  describe  some  of  the  many  computer  programs  which  now  exist 

“Numerous  simple<apability  hybrid  simulati<ms  are  availaUe  (refs.  34  through  39,  for 
example).  Of  these,  the  two  most  notable  programs  are  those  authored  by  Herridge  of  the 
Battelle,  Columbus  Labs  and  by  Gatlin  et  sL  of  Dynamic  Science,  . Inc.  The  work  done  by 


Herridge  and  Mitchell  was  directed  toward  automobile  crash  impact,  while  that  done  by 
Gatlin,  et  al.,  examined  the  vertical  impact  of  a  helicopter  fuselage.  This  latter  program 
(called  CRASPD  simulates  the  fuselage  as  rigid  masses  connected  by  nonlinear  axial  and 
rotary  springs  in  a  predetermined  arrangement.  Both  of  these  simulations  are  two- 
dimensional. 

“Of  the  intermediate-capability  programs,  the  most  advanced  and  perhaps  the  most  widely 
used  hybrid  simulation  is  KRASH  by  Wittlin  and  Gamon  (refs.  40  and  41).  KRASH  utilizes  a 
3-D  arbitrary  framework  of  point  masses  connected  by  beams  to  simulate  the  fuselage 
structure.  The  remaining  intermediate-capability  programs  use  finite-element  computer 
codes  and  include  Shieh’s  work  (ref.  42),  CRASH  by  Young  (refs.  43  and  44),  and  UMVCS  by 
Mclvor,  et  al.  (ref.  45).  Shieh  idealizes  the  structure  as  a  2-D  array  of  beams  with  yielding 
confined  to  the  plastic  hinges  at  their  ends,  while  CRASH  and  UMV(^  use  3-D  models  of  a 
framework  composed  of  rods  and  beams.  UMVCS  could  also  be  considered  a  hybrid  because  it 
requires  test  data  input  to  define  the  moment  rotation  curves  for  the  plastic  hinges  at  the 
beam  ends.” 

“The  detailed  crash  simulations  are  all  3-D  finite-element  codes  with  the  capability  of 
modeling  stringers,  beams,  and  structural  surfaces  such  as  skins  and  bulkhbad  panels.  The 
four  codes  currently  available  are  WHAM  by  Belytschko  of  Northwestern  University 
(ref.  46',  WRECKER  by  Welch,  et  al.,  of  Dlinois  Institute  of  Technology  (ref.  47),  ACTION  by 
Melosh,  et  al.,  of  Virginia  Polytechnic  Institute  of  Technology  and  State  University  (ref.  48), 
and  DYCAST  by  Pifko,  et  al.,  of  Grumman  Aerospace  Corporation  (ref.  49  and  50).  WHAM 
curaently  can  be  used  to  idealize  a  structure  which  contains  only  isotropic  material.  It  uses 
partly  interactive  yielding;  i.e.,  the  effect  of  shear  stresses  on  plasticity  is  neglected. 
WRECKER  contains  the  same  formulations  as  WHAM  but  also  has  the  added  convenience 
features  of  graphics  and  restart.  ACTION  also  has  partly  interactive  yielding,  and  it  can  be 
used  only  with  a  structure  constructed  with  isotropic  materials.  Additionally,  ACTTION  also 
contains  an  internally  varied  time  step  with  numerical  error  controls.  DYCAST  can  idealize  a 
structure  constructed  of  orthotropic  material.  Its  features  includr  fully  interactive  yielding, 
internally  varied  time  steps  with  error  control,  restart,  and  grapuic  output.” 

A  summary  of  the  assessment  of  these  sp^ific  crash  simulations  is  given  in  table  5.2  (from 
Cronkhite  et  al.,  ref.  33).  Note  that  the  hybrid  codes  do  not  account  for  collapse  or  failure  under 
combined  loads  because  the  crash  data  inputs  are  derived  from  tests  with  a  single  load.  All  of  the 
finit^lement  codes  except  Shieh’s  can  account  for  multiple-load  components.  The  crush  test  can 
furnish  the  hybrid  computer  codes  with  data  to  analyze  orthotropic  laminates  and  core-sandwich 
panels,  while  only  DYCAST  of  the  finite-element  codes  can  analyze  an  orthotropic  material. 

None  of  the  evaluated  finite-element  codes  can  currently  analyze  a  core  sandwich.  WRECKER  is 
the  only  one  of  these  codes  which  will  account  for  strain  rate  effects  in  a  logical  way  by 
determining  the  local  strain  rate  and  adjusting  the  stiffnesses.  All  the  hybrids  can  account  for 
joint  failure  and  crippling  because  these  effects  are  part  of  the  crush  test  data. 

The  program  ADINA  (ref.  51)  has  capabilities  similar  to  DYCAST  and  will  also  be  considered. 

DESIRABLE  ATTRIBUTES  IN  CRASH  SIMULATION  COMPUTER  PROGRAMS 

Three  basic  attributes  are  considered  in  evaluation  of  crash-simulation  computer  programs— 
technical  capability,  “permanence,”  and  ease  of  use. 

The  most  obv'.ous  attribute  needed  by  a  crash  dynamics  program  is  technical  capability  —  the 


Table  5.2-Computer  Crash  Simulations  Assessment 


Item 

Hybrid 

Finite  Element 

Plastic  collapse  and  crush 

All 

All 

with  combined  loads 

None 

All  except  Shieh's 

Material  failure 

All 

None 

with  combined  loads 

None 

None 

Skin  &  bulkhead 

All 

WRECKER.  WHAM. 

(Poorly) 

ACTION.  DYCAST 

Anisotropic  lamines  with 

All 

DYCAST 

cored  sar>dwiches 

An 

None 

Beam  cross-section  deform. 

All 

None 

(crippling) 

Joint  deform.  &  failure 

An 

None 

Strain  rate  stiffening 

kamal 

WRECKER 

Herridge 

With  local  variations 


None 


WRECKER 


program  should  m  capable  of  modeling  both  elastic  and  plastic  material  behavior,  and  also  be  able 
to  handle  large  structural  deformation  including  buckling. 

The  ability  to  simulate  impact  in  a  general  way  is  also  very  desirable.  A  general  interference  model 
would  permit  investigation  of  phenomena  such  as  plowing,  in  which  changes  in  the  aircraft 
geometry  during  impact  can  modify  the  characteristics  of  contact  between  the  aircraft  and  ground 
which  in  turn  can  change  the  sliding  resistance  of  the  ground.  In  the  models  investigated  herein, 
contact  can  be  modeled  only  if  the  general  behavior  of  the  contact  is  known  in  advance,  i.e.  parts  of 
the  structural  model  which  contact  and  direction  of  contact 

Lack  of  a  general  purpose  contact  model  in  crash  simulation  c.  des  investigated  herein  could  be  a 
serious  drawback. 

From  the  standpoint  of  a  user,  the  permanence  of  a  code  is  important.  Permanence  means  that 
someone  with  a  vested  interest  is  looking  after  the  code  so  that  someone  is  available  to  answer 
questions  and  also  some  assurance  that  the  code  will  not  soon  become  obsolete  through  neglect  of 
theoretical  advances  (which  are  happening  rapidly  in  the  field  of  computer  simulation  of  structural 
dynamics). 

Almost  as  important  as  the  theoretical  analysis  capabihty  of  a  program  is  its  euse  of  use.  Important 
features  in  this  category  include: 

1 .  Thorough  checking  of  input  data  for  errors;  and  well  designed  error  messages  which  pinpoint 
the  error,  help  the  user  understand  what  is  wrongs  and  (when  appropriate)  indicate  probable 
corrective  action.  For  example, 

“Error— Singular  Jacobian”  is  a  very  unenlightening  error  message. 

“Error— element  27  is  badly  distorted.  Check  sequence  in  which  nodes  are  specified”  is  much 
more  useful. 

2.  “Grace  under  fire”  —  From  time  to  time  it  is  almost  inevitable  that  a  computer  program  will 
encounter  a  situation  in  which  the  computation  cannot  proceed.  This  can  occur  through  errors 
in  the  input  data  which  are  so  subtle  or  difficult  to  detect  that  normal  error  checking  of  the  input, 
data  misses  them,  or  through  limitations  in  the  theory  on  which  the  analysis  depends.  It  is 
important  that  the  computer  program  recognize  this  situation  when  it  occurs  and  print  enough 
diagnostic  information  that  the  uaer  can  figure  out  what  went  wrong.  If  the  program  stops  in  the 
middle  of  the  computation  without  piOviding  good  diagnostic  information,  the  user  can  waste 
days  tracking  down  (often  by  trial  and  error),  the  error. 

3:  Well  organized  display  of  compu^  data.  The  output  must  be  legible  and  complete. 

4.  Availability  of  graphics  aids.  In  finite^lement  programs,  the  large  volume  of  data  needed  to 
describe  the  structure  and  the  (larger)  volume  of  information  computed  for  the  structural 
analysis  make  automatic  plotting  of  both  the  input  data  (i.e.  the  nodes  and  elements)  and  the 
computed  data  (e.g.  time  history  information)  mandatory  if  a  program  is  to  be  used  as  an 
engineering  tool. 

Ease  of  uae  is  usually  not  considered  in  evaluations  of  crash  simulation  programs,  probably  due  to 
the  evaluations  being  made  by  (or  in  close  coordination  with)  the  program  developers  rather  than 
by  a  disinterested  party. 


Program  efficiency  has  been  deliberately  excluded  from  consideration.  A  meaningful  definition  of 
efficiency  is  nearly  impossible  to  obtain.  The  cost  of  running  a  problem  is  not  a  good  measure  since 
it  depends  not  only  on  the  computer  used,  but  also  on  the  method  by  which  computation  costs  are 
reckoned  at  the  particular  inst^lation.  Moreover,  advances  in  computer  design  continually  reduce 
computation  cost  and  also  change  the  relative  importance  of  use  of  different  resources  (e.g. 
central,  processor  time,  disc  access,  etc.)  Error  checking,  considered  to  be  highly  cost  effective, 
wotOd  be  inefficient  by  this  measure  since  it  would  increase  computation  cost  of  a  particular  run. 

com:  ARISON  OF  KRASH,  DYCAST,  AND  ADiNA 

Three  computer  programs  were  selected  for  review.  KRASH  and  DYCAST  were  selected  based  on 
the  recommendations  of  Cronkhite  et  al.: 

The  major  conclusions  of  this  investigation  on  computer  crash  ^ulations  for  advanced 
material  applications  are: 

1.  There  is  no  satisfactory  single  existing  code 

2.  Hybrid  codes  are  theoretically  incomplete 

3.  Finite^lement  codes  currently  lack  sufHcient  advanced  material  capability 

The  recommond.^'tion  for  current  crash  simulations  on  advanced  materials  is  to  use  KRASH 
with  applicable  crush  test  data  for  preliminary  parametric  studies  and  gross  evaluations.  For 
a  detail  design,  DYCAST  can  be  used  for  analyzing  orthotropic  laminates.  However,  this  code 
is  still  under  development  and  has  not  yet  been  experimentally  verified.  It  is  not  currently 
possible  to  perform  an  extensive  detailed  design  evaluation  of  a  structure  with  sandwich-core 
construction.  This  type  of  construction  holds  promise  for  increased  energy  dissipiation  with 
advanced  composites.” 

The  computer  program  ADINA  (Automatic  Dynamic  Incremental  Nonlinear  Analysis)  was 
selected,  based  on  in-house  experience  with  the  code  of  the  analysis  of  cracking/crushing  for 
concrete  structures  under  large,  transient  loads.  Features  of  the  three  codes  are  summarized  in 
table  5.3. 

KRASH 

In  their  review  of  KRASH,  Cronkhite,  et  al.  reported: 

1.  The  KRASH  analysis  was  found  to  be  a  useful  tool  for  studying  effects  of  various  impact 
conditions  and  parameter  variations  on  the  overall  crash-impact  response  of  the  airframe, 
whether  the  airframe  is  of  metal  or  composite  constn^on. 

2.  There  is  excellent  documentation  and  correlaUon  of  the  KRASH  program  (refs.  52—55). 
These  documents  should  be  useful  to  anyone  working  in  the  area  of  structure 
crashworthiness  and  simulation  whether  or  not  the  KRASH  program  itself  is  used.” 

“^RASH  has  many  useful  built-in  crashworthiness  features,  such  as:  . 

•  Energy  summaries 

•  Occupiable  volume  change  and  penetration 


Table  5.3-Comparison  of  Program  Input  Features 


Characteristic  Types 
(note  1) 

KRASH 

DYCAST 

ADINA 

Element  Types 

TRUSS 

TRUSS 

TRUSS 

,  (T) 

BEAM 

' 

BEAM 

BEAM 

rigid  links 

3-0  membranes 

2-0  plane 
stress,  plane 
strain 

3-0  solid 

3-0  membrane 
(plane  stress 

Core-Sandwich 

plate 

2-D  Axisymmetric 
shell  or  solid 

■ 

3-0  solid 
thick  shell 

Thin  shell 

2-0  fluid 

3-0  fluid 

Material  Model 

Curve 

linear  ortho¬ 
tropic  elastic- 
plastic 

linear  orthotropic 
elastic,  non-linear 
elastic, 
thermo-elastic 
elastic  plastic 
(Von  Mises 
or  Orucker- 
Prager  yield, 
thermo-elastic- 
plastic-creep 
(Von  Mises 
yield),  Mooney- 
Rivlin  Material, 
concrete  model, 
user  defined 

Isotropic 
or  Kinematic 
hardening. 

Mass  Model  (T) 

Lumped 

Lumped  or 
consistent 

Lumped  or 
consistent 

Geometric  Nonlinearity 
(T) 

yes 

yes 

yes 

Table  5.3-Compaiison  of  Program  Input  Features  (Concktded) 


Characteristic  Types 
(note  1 ) 

KRASH 

DYCAST 

ADINA 

Integration  Method 

Euler 

Newmark , 

Newmark, 

(T) 

predictor- 

Wilson, 

Wilson, 

corrector 

Central  Difference 

Central  Difference, 

fixed  time 

Modified  Adam 

all  fixed 
step/predictor- 

variable  time  step 
(except  central 
difference) 

corrector/time  step 

Plot  capability 
time  history  of 
displacements. 

no 

yes 

no 

velocities 

accelerations 

(U) 

(note  2) 

Deformed  Structures 
(U) 

no 

yes 

no 

Special  Crash  Cutout 

energy 

distribution 

yes 

yes 

no 

Structural  c.q. 

yes 

no 

no 

computes  occupiable 

volune 

(U) 

yes 

no 

no 

Documentations 

Theory  manual  (U) 

Complete 

not  available  on 
single  document 

complete 

User  manual 
(U) 

Complete 

preliminary 

complete 

Size  of  user  conmunity 

(U) . - _ - 

small 

very  ^all 

large 

Notes: 

(1)  The  symbols  (T),  (U)  and  (P)  used  In  the  characteristic  column  indicate 
the  type  of  feature;  T  refers  to  Technical  capacity,  U  refers  to  user 
convenience,  and  P  referrs  to  "permance"  -  the  likelihood  that  the  program 
will  be  maintained. 

(2)  Plot  capability  for  AOINA  is  being  developed  by  AOINA's  authors. 
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•  Automatic  rupture  of  elements 

•  DRI  and  man  model 

•  Friction  and  plowing 

•  Soil 

•  Sloped  silrface  imp'jct 

"Because  of  the  coarse  mathematical  representation  of  the  structure,  the  major  problem  with 
performing  a  KRASH  analysis  is  involved  in  the  ‘art’  of  modeling  and  obtaining  structure  inputs  to 
the  program." 

Cronkhite,  et  al.  found  a  number  of  errors  in  the  KRASH  code  and  weaknesses  in  the  analysis,  as 
well  as  an  inconvenient  input  scheme,  some  FORTRAN  coding  errors  that  were  discovered  are  the 
following: 

1.  The  printer  plot  routine  contained  array  dimensioning  errors  that  occurred  randomly  when 
plotting  element  loads  and  relative  deflections. 

2.  "No  input  for  external  crushing  springs  caused  all  material  properties  to  be  zeroed  out. 

3.  "Maximum  external  spring  load  after  bottoming  out  was  internally  set  to  ten  times  the  load 
just  prior  to  bottoming  out  which  in  some  cases  did  not  slow  the  vehicle  down.  This  has  since 
been  fixed  by  making  the  cutoff  load  ten  times  the  maximum  load  used  before  bottoming  out. 

4.  "The  damping  coefficient  for  beam  elements  remains  a  constant  value  even  through  the 
element  stiffness  has  been  reduced  by  the  stiffness  reduction  factor  KR.  The  damping  should 
also  be  reduced  by  the  same  factor  as  the  stiffness." 

"For  engineers  accustomed  to  user-oriented  structural  analysis  digital  computer  codes,  such  as 
NASTRAN,  the  input  to  KRASH  seems  cumbersome.  A  preprocessor  to  help  convert  NASTRAN 
input  data  to  KRASH  input  may  partially  solve  this  problem.  This  would  al^  facilitate  user 
training  on  the  KRASH  program.” 

Cronkhite  et  al.  recommended  a  number  of  corrections/improvements  be  made  to  KRASH, 

1.  "Because  the  airframe  structure  often  fails  locaUy  at  a  weak  spot,  a  plastic  hinge  element  for 
the  internal  structure  modeling  is  needed.  Also,  scalar  springs  would  be  useful  for  modeling 

.  seats  and  main  rotor  pylons. 

2.  "The  user  should  be  allowed  to  apply  arbitrary  boundary  conditions  to  the  model. 

3.  "A  12  by  12  direct  input  matrix  option  would  essentially  allow  substructuiing. 

4.  "KRASH  now  uses  a  fued-time  step  integrator.  A  variable  time  step  procedure  should  be 
employed  to  improve  nm  times.  Also,  an  implicit  integrator  such  as  th«  Newmark-Beta 

.  method  should  reduce  run  times  as  well  as  improve  numerical  stability. 

5.  "A  rigid  body  motion  analysis  for  impact  such  as  rollover  where  no  signi  ficant  stricture 
response  occurs  for  long  periods  of  time  would  greatly  reduce  solution  timiis. 


6.  ‘Damping  should  be  added  to  the  external  springs. 

7.  ‘The  stiffness  reduction  features  (KR)  should  apply  to  element  damping  as  well  as  stiffness. 

8.  ‘Input  improvements 

•  Add  descriptive  names  to  identify  data  types 

•  Allow  arbitrary  mass  point  numbering  by  user 

•  Develop  a  NASTRAN  to  KRASH  input  preprocessor 

9.  ‘Add  structure  plotting  capalUity  —  deformed  and  underformed.” 

DYCAST 

Cronkhite,  et  al.  reported:  ‘This  demonstration  of  DYCAST  as  a  crashworthiness  design  analysis 
tool  pointed  out  its  usefulness  while  indicating  some  need  for  improvement.  'n:e  main  items  in  this 
assessment  are: 

1.  “Gross  dynamic  behavior  was  displayed,  including  overall  structural  deformation  and 
motions  of  critical  masses. 

2.  “Detailed  dynami'*  .'-esponse  was  shown  in  the  deformations,  strains,  stresses,  and  loads  on 
individual  structua..  components  for  metals  and  orthotropic  composites. 

3.  ‘Detailed  structural  modifications  were  indicated  by  noting  overloaded  components  and 
equipment  attachment  points  and  showing  action  of  the  energy  absorbers. 

4.  *Computational  costs  were  acceptably  moderate,  using  1.9  CPU  minutes  per  probiem-time 
msec  for  471  degrees  of  freedom,  while  the  restart  feature  permitted  small  time  segments  to 
be  run  in  sequence  without  tying  up  the  computer. 

5.  Tmra  liate  improvements  needed  are  rebound  from  the  barrier  surface  and  automatic 
failure  criteria,  which  are  now  being  implemented. 

6.  Tuture  developments  needed  are  the  addition  of  a  core-sandwich  plate  element  (for 
honeycomb  and  other  cored  structural  components),  output  of  occupant  decelerative  injury 
paraineters,  and  caWlation  of  energy  consumption  and  distribution. 

7.  Test  verification  is  a  very  important  need  to  explore  the  range  of  applicability  and 
accuracy.” 

It  is  significant  that  Cronkhite  is  apparently  satisfied  with  the  DYCAST  input  scheme  and  does 
not  report  any  analysis  or  coding  errors.  Some  of  the  recommended  improvements  have  since  been 
niade. 

ADINA 

The  ADINA  program  has  been  developed  by  Dr.  Bathe  at  the  Massachusetts  Institute  of 
Technology  (rtf.  61).  There  is  an  active  user  group  which  hcdda  regular  conferences  regarding 
ADINA  engineering  applications.  ADINA  has  dynamic-analysis  capability  roughly  equivalent  to 


DYCAST,  but  in  addition  has  static-analysis  capability  (linear  or  nonlinear)  and  can  perform  eigen 
value/eigen  vector  calculations.  A  noteworthy  feature  of  ADINA  is  the  extensive  checking  of  the 
input  data  for  errors  and  the  relatively  complete  set  of  error  messages  flagging  errors  which 
develop  during  execution,  for  example,  singularity  of  the  stiffness  matrix.  The  major  deficiencies 
are  the  input  scheme,  which  is  “fixed  field”  and  relatively  difficult  to  locate  individual  data  items 
■  1,  and  the  lack  of  a  variable  time  step  numerical  integration  scheme. 

Existence  of  an  active  ADINA  user  group  is  a  significant  asset,  and  a  u"^r  without  continuous  need 
for  nonlinear  dynamic  analysis  should  give  ADINA  serious  consider.!  tion  based  on  this  alone. 
Existence  of  the  user  group  assures  that  assistance  will  be  available  to  extend  or  recheck  an 
analysis  at  a  later  date. 

SUMMARY 

There  is  agreement  between  researchers  in  crash  dynamics  that  both  the  hybrid  approach  and  the 
purely  mathematical  finite-element  method  are  needed  at  the  current  level  of  technology.  Cronkhite, 
et  al.  note  the  inconvenience  of  coping  with  multiple  input  schemes. 

Since  the  hybrid  and  purely  mathematical  finite-element  analysis  methods  are  compatible  and,  in 
fact,  very  similar,  consideration  should  be  given  to  developing  a  single  package  combining  the  best 
features  of  both  approaches.  There  are  two  advantages.  First,  the  user,  who  will  likely  need  both 
methods  to  solve  his  problem,  will  need  to  become  familiar  with  just  one  program.  Secondly, 
combined  analysis  becomes  possible;  a  detailed  finite-element  model  can  be  used  for  ne  part  of  the 
structure  (e.g.  a  seat)  while  another  portion  of  the  structure  could  be  modeled  more  simply  with 
hybrid  elements  whose  static  mechanical  properties  are  obtained  by  static  test.  In  principle,  the 
static  test  could  be  simulated  by  the  purely  mathematical  code;  in  practice,  more  validation  of  the 
purely  mathematical  codes  is  needed  before  this  is  practical. 

A  deficiency  in  all  these  models  is  the  lack  of  a  general,  purpose  contact  element  to  model  collision 
between  two  or  more  parts  of  the  structure.  In  existing  programs,  contact  can  be  modeled  only  by 
connecting  elements,  e.g.  springs,  between  contacting  surfaces.  This  entails  anticipation  of  every 
collision  which  might  occur  and  each  individual  specification  of  the  contact  element  together  with  its 
mechanical  characteristics.  Reference  56  describes  an  experimental  general  purpose  contact 
model,  which  might  be  developed  into  a  practical  contact  element. 

TEST  TECHNOLOGY 

A  review  of  crash  tests  has  been  conducted  to  ascertain  the  status  of  test  technology.  Tests  include 
full-scale  aircraft  and  some  components.  Test  objectives,  iiutrumentation,  and  test  methods  are 
diacussed.  In  addition,  some  static  tests  applicable  to  structural  crashworthiness  are  reviewed. 

Programs  to  test  full-scale  aircraft  have  been  conducted  by  NASA,  the  FAA,  and  the  U.S.  Army 
over  the  last  30  years.  These  programs  have  treated  small  propeller-driven  transports,  general 
aviation  light  aircraft,  and  helicopters.  Dxurihg  this  time,  testing  technology  has  advai  :ed, 
particularly  in  the  areas  of  instrumentation,  data  acquisition,  and  processing. 

Seats,  fuel  cells,  and  landing  gear  have  been  tested  statically  and  dynamically  in  development  and 
certification  testing  to  deoign  crash  loads.  In  addition,  as  a  part  of  research  programs  some 
subetructurea  have  also  been  tested. 

The  purpose  of  crash  testing  has  been  to  assess  crashworthiness,  level  of  crash  loads,  crash 
response  of  the  aircraft,  and  crashworthine^e  performance  of  design  modifications.  More  recently. 


as  analytical  methods  have  evolved,  some  testa  have  also  had  the  collection  of  data,  for  verification 
of  analyses  as  an  objective. 

In  the  material  presented  below,  selected  tests  are  presented  as  representative  of  r  technique.  The 
test  methods  in  some  cases  have  been  quoted  from  the  reports  and  in  other  cases  have  been 
"ummaiized. 

FULL-SCALE  PROPELLER-DRIVEN  TRANSPORTS  (Tert  Track  Method) 

Early  crash  tests  by  NACA  of  full-scale  World  War  11  vintage  propeller-driven  aircraft  (refs.  57 
and  5t^)  had  determination  of  crash  loads  and  effects  of  crash  parameters  on  these  loads  as  an 
objective.  These  tests  were  part  of  a  crash-Hre  study  and  utilized  the  test  facility  developed  for 
that  program. 

Aircraft  were  propelled  along  a  track,  gear  sheared  off,  and  then  impacted  a  shaped  earthen 
barrier  to  simulate  impacting  the  earth.  Angles  of  impact  up  to  30*  at  speeds  of  about  100  mph 
were  obtained.  Floor  accelerations  at  various  stations  along  the  fuselage  were  measured.  In 
general,  the  aircraft  impacted  the  shaped  barrier  in  the  vicinity  of  the  cockpit.  This  type  of  test  is 
representative  of  a  flight  into  obstruction  where  the  obstruction  is  an  earthen  mound.  Some  tests 
were  performed  to  simulate  the  effect  of  hitting  trees  with  one  wing  to  produce  a  ground  loop. 

Acceleration  data  were  obtained  with  instrumentation  and  processing  equipment  representative  of 
the  late  1950s.  Due  to  differences  in  aircraft  structure,  crash  energy  levels,  absence  of  analytical 
tools,  and  to  the  small  amount  of  data  on  the  crash  performance,  the  test  data  have  limited 
application  to  commercial  jet  transport.  However,  the  data  are  of  historical  value  and  do  provide 
some  insight  into  crash  loads.  Further  they  served  as  models  for  later  testing. 

In  1964,  the  FAA  conducted  two  crash  tests  of  complete  aircraft.  A  Lockheed  L-1649  (ref.  59) 
transport  aircraft  and  a  Douglas  DC-7  (ref.  60)  were  tested  using  methods  similar  to  the  NACA 
tests.  In  these  tests,  instnurented  seat  installations  and  dummies  with  seat  restraints  were 
included.  In  addition,  high-speed  camera  coverage  of  the  aircraft  interiors  was  provided.  Floor  and 
dummy  accelerations  were  measured. 

Instrumentation  problems  due  to  test  equipment  acceleration  environment  on  the.D07  resulted  in 
the  loss  of  much  of  the  acceleration  data  for  that  test.  In  addition,  the  DC-7  almost  overran  the  test 
range,  illustrating  problems  of  controlling  the  test  vehicle  during  crash  impacts. 

While  these  tests  provided  some  good  crash  loads  data,  particularly  for  the  seat/occupant,  the 
value  of  the  test  data  would  have  been  enhanced  by  tl  >  availability  and  application  of  analytical 
methods  to  the  data.  Lack  of  such  methods  has  limited  the  application  of  the  crash  loads  to  the  test 
conditions  for  the  type  of  aircraft. 

FULL-SCALE  CRASH  TESTING  OF  GENERAL  AVUTION  AHtCRAFT  (Swing  Test 
Method) 

Full-scale  crash  testing  is  performed  at  the  Langley  Impact  Dynamics  Research  Facility  (refs.  61 
and  62).  This  facility  is  the  former  Lunar  Landing  Research  Facility  modified  for  free-flight  crash 
testing  of  full-scale  aircraft  structures  and  structural  components  under  controlled  test  conditions. 
The  basic  gantry  structure  is  73  m  (240  ft)  high  and  122  m  (400  ft)  long  supported  by  three  sets  of 
inclined  legs  spread  31  m  (267  ft)  apart  at  the  ground  and  20  m  (67  ft)  apart  at  the  66  m  (218  ft) 
level.  A  movable  bridge  with  a  pullback  winch  for  raising  the  test  spedmeh  spans  the  top  and 
transverses  the  length  of  the  gantry. 


Test  Method 
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The  aircraft  is  suspended  from  the  top  of  the  gantry  by  two  swing  cables  and  is  drawn  back  above 
the  impact  surface  by  a  pullback  cable.  An  umbilical  cable  used  for  data  acquisition  is  also 
suspended  from  the  top  of  the  gantry  and  connects  to  the  top  of  the  aircraft.  The  test  sequence  is 
initiated  when  the  aircraft  is  released  from  the  pullback  cable,  permitting  the  aircraft  to  swing 
pendulum  style  into  the  impact  surface.  The  swing  cables  are  separated  from  the  aircraft  by 
pyrotechnics  just  prior  to  impact,  freeing  the  aircraft  from  restraint.  The  umbilical  cable  remains 
attached  to  the  aircraft  for  data  acquisition,  but  it  also  separates  by  pyrotechnics  before  it  becomes 
taut  during  skid-out.  The  separation  point  is  held  relatively  fixed  near  the  impact  surface,  and  the 
flight  path  angle  is  adjusted  from  0“  to  60°  by  changing  the  length  of  the  swing  cable.  The  height 
of  the  aircraft  above  the  impact  surface  at  release  determines  the  impact  velocity  which  can  be 
varied  0  to  26.8  m/a  (60  mph).  The  movable  bridge  allows  the  pullback  point  to  be  positioned  along 
the  gantry  to  insure  that  the  pullback  cables  pass  through  the  center  of  gravity  and  act  at  90°  to 
the  swing  cables. 

To  obtain  flight  path  velocities  in  excess  of  26.8  m/s  (60  mph)  a  velocity  augmentation  method  has 
been  devised  which  uses  wing-mounted  rockets  to  accelerate  the  test  specimen  on  its  downward 
swing.  Two  Falcon  rockets  are  mounted  at  each  engine  nacelle  location  and  provide  a  total  thrust 
of  77,850  Newtons. 

Instnunentation 

Data  acquisition  from  full-scale  crash  tests  is  accomplished  with  extensive  photographic  coverage, 
both  interior  and  exterior  to  the  aircraft,  using  low-,  medium-,  and  high-speed  cameras  and  with 
on-board  strain  gages  and  accelerometers.  Strain  gage  type  accelerometers  (range  of  250  and  750  g 
and  0  to  2000  Hz)  are  the  primary  data  generating  instruments,  and  are  positioned  in  the  fuselage 
to  measure  accelerations  both  in  the  normal  and  longitudinal  directions  to  the  aircraft  axis. 
Instrumented  anthropomorphic  dummies  (National  Highway  Trafnc  Safety  Administration 
Hybrid  II)  are  on  board  all  full-scale  aircraft  tests  conducted  at  Langley.  Restraint  system 
arrangement  and  type  of  restraint  used  vary  from  test  to  test. 

Data  signals  are  transmitted  from  the  aircraft  specimen  throuigb  an  umbilical  cable  to  a  junction  box  on 
tbp  of  the  gantry.  From  the  junction  box,  the  data  is  transmitted  through  hard  wire  to  the  control  room 
where  the  data  signals  are  recorded  on  FM  multiplex  recorders.  In  order  to  correlate  data  signals  on 
the  multiplex  recorders  with  external  high  speed,  motion  picture  data,  an  IRIG  A  time  code  was 
recorded  simultaneously  on  the  magnetic  tapes  end  on  films.  There  is  also  a  60  Hz  time-code 
generator  with  the  onboard  events  recorded  with  the  cameras.  A  Doppler  radar  unit  is  placed 
approximately  60  m  behind  the  impact  point  to  obtain  the  horizontal  velocity  of  the  aircraft. 

At  the  time  the  data  is  being  recorded,  the  data  passes  through  a  600  Hz  low-pass  filter.  The  data  on 
the  magnetic  tapes  are  then  digitized  at  4000  samples  per  second.  Digitized  accelerpmeter  data  is 
then  passed  through  a  finite  impulse  response  Hlter  and  filtered  as  follows; 


1. 

Dummy  head 

600  Hz  (unHltered) 

2. 

Dummy  chest 

180  Hz 

3. 

Dummy  pelvis 

180  Hz 

4. 

Seat 

20  Hz 

5. 


Floor  stnictiue 


20  Hz 


Motion  picture  analysis  consists  of  plotting  a  displacement-time  curare  from  the  film  data  and  fitting 
least  square  polynominal  functions  (up  to  tenth  order)  to  the  measured  displacements  and  then  twice 
differentiating  the  displacements  to  obtain  accelerations.  Accelerations  thus  obtained  compare  very 
well  with  the  Altered  accelerations. 

COMPONENT  TESTS  USING  CATAPULT  METHOD 

These  tests  (ref.  63)  are  not  designed  to  bring  the  cabin  environment  up  to  the  limits  of  survivability, 
but  they  are  designed  to  expose  the  fuel  tank  location  to  a  destructive  environment. 

Crash  tests  were  performed  at  the  National  Aviation  Facilities  Experimental  Center  (NAFEC) 
catapult  facility.  A  compressed-air  catapult  was  used  to  accelerate  the  test  aircraft  along  a  90-foot 
track.  At  the  end  of  the  catapult  stroke,  the  aircraft,  which  was  pulled  by  its  nose  gear,  was 
released  to  impact  an  earthen  Ull  of  4”  slope.  At  the  base  of  the  hill,  a  1 2-in.  by  12-in.  I-beam  was 
installed  to  break  off  the  aircraft’s  landing  gear.  The  note  gear  was  strengthened  to  withstand  the 
tetapult  pulling  force,  while  the  main  landing  gear  mounting  bolts  were  sawed  in  half  to  effect  an 
easier  separation  from  the  wings.  Spoilers  were  installed  along  the  upper  wing  surface  to  keep  the 
airplane  from  flying.  At  a  distance  of  10  ft  from  the  I-beam,  poles  were  sunk  into  the  hill  to  a  depth 
of  18  inches.  These  poles  were  spaced  symmetrically  off  the  centerline  of  the  hill,  at  42  inches  and 
108  inches  each.  The  poles  were  hollow  mild  steel  tubing,  4.375-in.  outside  diameter,  0.188-in.  wall 
thickness  and  were  10  ft  in  length.  Small  rock  piles  were  located  on  the  hill  to  further  increase  the 
severity  of  the  crash  condition.  There  are  no  standards  in  general  use  for  a  crash  site  as  is  used  in 
this  type  of  test;  hence,  the  selection  of  the  type  of  poles,  rocks,  and  hill  were  selected  to  produce  a 
destructive  environment  to  the  fuel  tank  location.  The  crash  site  was  intended  to  be  at  least  as 
severe  as  a  crash  at  an  airAeld  involving  airport  structures  such  as  approach  lights. 

In  all  testa,  the  aircraft  main  tanks  were  Ailed  with  water.  Accelerometers,  CEC  type  4-203-001, 
were  installed  on  the  Aoor  of  the  aircraft  at  the  longitudinal  center  of  gravity  location  (station 
126).  Accelerations  in  the  vertical  and  longitudinal  direcAon  were  recorded  on  an  oscillograph.  The 
data  w(  re  Altered  at  90  Hz. 

DYNAMIC  SEAT  TESTS  (Sled  Test  Method) 

The  testing  of  seats  to  simulate  dynamic  crash  loads  has  been  conducted  by  the  U.S.  Army,  CAMI, 
NADC,  NASA,  and  the  seat  manufacturers.  Ihe  Army,  following  the  recommendaAons  of  its  Aircraft 
Crash  Survival  Design  Guide,  has  had  helicopter  and  light  aircraft  seats  dynamically  tested  as  a 
requirement  for  sped Aca Aon  compliance.  These  testa  have  bemi  conducted  at  the  CAMI  facility  or 
by  Simula,  Inc.  These  test  programs  have  served  as  developmmxt  tools  in  uncovering  unanAcipated 
weaknesses  in  design  details  and  generally  have  resulted  in  an  improved  crashworthy  seat  for  the 
Army  applicaAon.  The  Army  test  requirements  indu^  provisions  for  applying  the  test  impulse  with 
the  floor  in  a  pre-warped  posiAon.  While  these  conditions  may  represent  limiting  cases  for  the  Army 
usage,  the  heavier  commercial  jet  aircraft  construction  may  predude  warping  to  the  degree  required 
by  the  Army. 

The  CAMI  facility  (ref.  64)  uses  a  sled  test  vehide  on  a  borizontal  track  to  carry  the  seat  and 
occupant  (anthropomorphic  dummy).  The  sled  is  gradually  accelerated  to  a  velocity  and  is  abrupUy 
decelerated  by  energy  abeorbing  wires  to  apply  the  test  impulse.  VariaAon  in  orientaAon  in 
mounting  of  seats  permits  loading  in  the  desired  axis.  This  procedure  has  been  refined  and 
generally  gives  good  test  results. 

Test  Procedure 

Two  impact  orientaAons  were  used  in  these  tests.  The  Ant,  corresponding  to  Test  1  of 


/ 


MIL-S-58095  (AV)  (ref.  65),  produced  combined  downward,  forward  and  lateral  loads  on  the  seat. , 
The  second  provides  forward  and  lateral  loads  on  the  seat  and  corresponds  to  Test  2  of 
MIL-S-58095  (AV).  Both  tests  used  a  floor  warpage  fixture  which  rolled  the  left  seat  track  10® 
outboard  and  pitched  the  right  seat  track  10®  down,  corresponding  to  the  floor  buckling  and 
warping  conditions  required  for  static  teats  under  MIL-S-58095  (AV).  An  Alderson  CG-95 
anthropomorphic  dummy,  S/N  500,  weighing  224  lbs  furnished  for  these  tests  by  the  Naval  Air 
Development  Center  (NADC),  simulated  the  seat  occupant.  The  dummy  was  clothed  in  acrylic  kn.H 
pants  and  shirt  for  these  tests.  Shoes  were  not  used.  Triax’al  clusters  of  accelerometers  were 
located  in  the  dummy’s  cliest,  on  the  seat  pan,  and  on  the  floor  fixture.  Strap  load  tensiometers 
were  placed  on  the  shoulder  belt  and  lap  belt  webbing.  Because  of  the  design  of  the  restraint 
system,  there  was  no  free  webbing  on  which  to  locate  the  tensiometers,  so  that  each  tensiometer 
was  in  contact  with  the  dummy  as  well  as  the  webbing.  Since  this  may  introduce  error  in  the  data, 
the  webbing  load  data  presented  in  this  report  should  be  used  with  caution.  An  accelerometer  was 
also  mounted  on  the  sled  to  provide  reference  data  for  adjusting  the  impact  pulse.  Unless 
otherwise  noted,  sled  and  floor  data  were  filtered  in  accordance  with  Channel  Class  60  (0-100  Hz) 
seat  and  dummy  accelerometers  in  accordance  with  Channel  Class  180  (0-300  Hz)  and  tensiometers 
in  accordance  with  Channel  Class  600  (0-1000  Hz)  of  SAE  J  211b. 

All  tests  were  filmrxl  on  instrum.entation  cameras  operating  at  500  or  1000  frames  per  second. 

TEST/SIMULATION  PROGRAM  OF  STRUCTURAL  COMPONENTS  (Drop  Tower 
Method) 

This  program  (ref.  66)  called  for  crash  testing  and  analytical  simulation  of  helicopter  structural 
components  and  correlation  of  the  re.sults. 

The  primary  objective  of  this  activity  was  to  provide  a  validation  of  the  analytical  techniques  for 
helicopter  crashworthiness  design  developed  to  date  and  as  improved  in  this  program.  There  was 
also  an  interest  in  gathering  basic  crash  response  data  that  could  be  used  directly  in  design  or  as 
input  to  analytical  procedures. 

A  nose  section  of  a  CH-47  helicopter  from  station  160  forward  was  used  as  the  basic  structure.  A 
.irward  transmission  and  rotor  head  assembly  were  installed.  Two  crew  seats  were  installed  in  the 
cockpit;  a  standard  CH-47  seat  at  the  pilot  location  and  a  crashworthy  crew  seat  at  the  co-pilot 
station,  Each  seat  contained  a  dummy  which  approximated  the  50th  percentile  aviator.  Total 
weight  of  the  specimen  complete  with  seats  and  dummies  was  3800  pounds. 

Instrumentation 

Types  of  measuring  devices  used  in  this  test  were  accelerometers,  strain  gages,  and  deflection 
indicators. 

In  addition  to  ±  100  g  accelerometers  some  ±500  g  shock  accelerometers  were  used  in  areas  where 
high  acceleration  levels  were  predicted.  These  were  ua^  to  overcome  previous  problems  where 
high  g  levels  caused  circuit  saturation  resulting  in  excessive  zero  shifts  with  long-term  decay 
characteristics. 

Five  ±100  g  accelerometers  (CEC  4-281-001)  and  five  ±50  g  accelerometers  (PCB  Piezotronica 
Inc.,  Model  302 A)  were  mounted  at  selected  locations.  Three  deflection  indicators  were  mounted  at 
selected  locations.  Indicator  tubes  were  attached  to  the  floor  and  passed  through  the  roof  of  the 
specimen.  Eight  strain  gages  were  installed  on  selected  structural  elements.  .All  gages  were 
unaxial.  An  additional  strain  gage  was  installed  on  the  crashworthy  crew  seat  vertical  colunmn. 
All  data  were  recorded  on  magnetic  tape  using  an  FM  wide-band  IRIG  recording  system. 


Hoisting  equipment  was  adjusted  prior  to  the  test  to  provide  a  nominal  pitch  attitude  at  release  of 
0*  and  a  drop  height  of  17.3  ft  to  give  an  impact  velocity  of  33.3  ft/s.  Roll  and  pitch  attitudes  were 
also  set  to  0°.  Four  ropies  were  attached  to  the  specimen  to  limit  to  45”  any  postcrash  rotation 
about  the  pitch  and  roll  axes. 

Black  and  white  movies  (1500  pps)  were  recorded  at  three  locations  and  provided  three  views:  a 
rear  view  of  the  specimen,  an  oblique  view  from  the  right  rear  and  another  oblique  view  from  the 
left  front 

A  400  pps  color  movie  camera  was  set  to  view  the  crashworthy  crew  seat  through  the  left  side 
copilot  door  opening  of  the  cockpit.  Additionally,  two  24-pp8  movies  were  taken  at  approximately 
the  same  locations  as  the  two  ISCKl-pps  cameras  positioned  obliquely  to  the  specimen. 

Of  the  10  accelerometers  used,  all  provided  good  data  for  the  inital  impact  phase  of  the  test. 
Subsequent  to  initial  impact,  at  time  0.06  second,  one  accelerometer  signal  was  lost  due  to 
collapsizig  structure  of  the  station  95  bulkhead  pinching  a  wire  between  the  structure  and  the  edge 
of  the  mounting  plate  for  the  crashworthy  crew  seat.  This  resulted  in  signal  loss  from  the 
accelerometer  mounted  on  the  crashworthy  seat-mounting  plate.  However,  the  data  obtained  up  to 
the  time  of  signal  loss  is  acceptable  and  covers  the  major  range  of  interest  for  a  test  of  this  type. 

Three  deflection  indicators  were  mounted  in  the  test  specimen.  These  were  to  provide  time-history 
records  of  the  displacement  of  the  specimen’s  crown  relative  to  the  floor,  and  also  to  give  a  post¬ 
test  indication  of  the  plastic  deformation  that  occurred. 

By  using  the  pretest  dimensions  of  the  specimen  in  conjunction  with  the  post-test  gross  deflection 
indications  provided  by  a  rubber  grommet  sliding  on  each  indicator  tube,  it  is  possible  to  determine 
the  maximum  elastic  and  plastic  deformations  that  occurred  during  the  crash  sequence. 

Unfortunately,  only  one  of  the  defection  indicators  provided  acceptable  deflection  time-history 
data;  the  other  two  suffered  from  poor  wiper  contact  and  possible  wire  binding  and  stretching. 

A  total  of  nine  uniaxial  gages  were  installed,  eight  at  selected  locations  on  the  structure  and  one  on 
the  vertical  attenuator  of  the  crashworthy  crew  seat.  Some  of  the  gages  were  in  areas  where  severe 
structural  damage  occurred  resulting  in  gage  failures,  zerp  shifts,  and  generally  unacceptable  data. 

The  strain  gage  acceptability  limitation  is  the  manufacturer’s  recommended  1.5%  strain  value  for 
room  temperatiure  cmditions. 

Test  Conclusions 

This  test  provided  reasonably  good  initial  impact  data  for  all  accelerometer  channels  without 
obviously  extreme  :»ro  shifts  or  early  loss  of  signal.  The  modifled  circuitry  and  use  of  5(X)  g 
accelerometers  for  iiecording  impacts  of  this  magnitude  shows  a  marked  improvement  oyer  the 
results  obtained  for  test  numbers  1  and  2. 

The  selected  impact  velocity  provided  sufficient  energy  to  cause  failures  of  many  of  the  structural 
elements  without  causing  excessive  collapse.  It  is  apparent  that  a  greater  impact  velocity  would 
have  resulted  in  excessive  structural  collapse  and  rendered  the  test  unrepresentative  of  a 
survivable  crash. 

The  strain  gages  suffered  from  the  effects  of  adjacent  structural  failures  rendering  the  data  of 
questionable  value  in  some  instancek.  In  fact,  it  is  proving  to  be  extremely  difficult  to  select 
positions  for  the  strain  gages  where  useful  data  is  obtained  and  adjacent  structural  failure  does  not 
occur. 
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In  a  test  where  limited  instrumentation  capability  exists,  it  is  considered  that  the  use  of  more 
accelerometers  and  less  strain  gages  nuy  prove  to  be  more  cost  effective  in  providing  data  suitable 
for  correlation  with  analytical  results. 

The  deflection  indicators  again  did  hot  perform  well,  with  only  one  providing  a  deflection  time- 
history.  It  appears  that  the  problem  is  due  to  poor  wiper  action  in  conjunction  with  stretching 
wire;  future  tests  will  incorporate  a  stronger  wire  material  such  as  piano  wire.  Such  an  installation 
will  possess  a  lower  electrical  resistance  value  but  it  is  considered  that  an  adequate  recording 
system  exists  to  accommodate  this.  Additionally,  the  generation  of  a  continuous  signal  without 
wipe  chatter  will  enhance  signal  recording. 

It  was  unfortunate  that  the  high  speed  movie  films  were  spoiled  in  development  since  a  better 
understanding  of  failure  sequences  may  have  been  obtained  for  the  primary  structural  elements. 

However,  overall  structural  damage  and  recorded  data  provide  a  good  set  of  information  for 
oorrebition  with  computer  simulation  results. 

STATIC  TESTS 

Static  tests  provide  useful  data  on  the  crash  performance  of  structures  where  the  inertia  loads  due 
to  the  local  structural  mass  have  a  small  effect  on  the  crash  response.  Some  examples  of  this  are 
fuselage  structures  in  shear  action,  lower  fuselage  structure  in  crashing  action,  and  seat  structure 
under  floor  displacement  and  occupant  loads.  Hie  inelastic  load  carrying  capability  of  skin- 
stringer,  columns,  arid  torque  box  sections  for  large  deflections  may  also  be  obtained  from  static 
tests.  Hiese  data  are  useful  in  hybrid  simulations  in  validating  detailed  structural  models,  and  in 
assessing  design  performance  of  some  components. 

Static  tests,  while  avoiding  problems  of  dynamic  data  acquisition,  do  have  problems  of 
maintaining  load  magnitude  and  direction,  and  valid  boundary  conditions  during  large  deflections. 
Internal  loads  usually  cannot  be  obtained  by  strain  gages  as  strain  gages  fail  at  the  large 
deflections  of  interest.  However  rapidly  recording  load  cells  and  deflection  gages  may  yield  valid 
force-deflection  curves  for  the  loading  condition. 

These  techniques  have  been  used  successfully  in  the  Army-sponsored  study  and  in  the  NASA 
GeneriJ  Aviation  research  on  floor  structure.  Some  further  development  of  the  methods  might  be 
expected  as  additional  testing  is  performed. 

IMPACT  TEST  FACILITIES 

Impact  test  far'Jities  suitable  for  research  and  development  crashworthiness  testing  of  structural 
subsystems  auu  of  complete  aircraft  have  been  reviewed.  The  review  is  confmed  to  representative 
major  government  facilities. 

Crash  testing  of  commercial  jet  transports,  or  even  structural  components  involves  engineering 
problems  of  scale  which  have  been  overcome  in  past  testing  but  now  take  on  a  new  Himemiinti  For 
the  707  the  fuel  load  weighs  72,498.2  kg,  the  wing  tip-to-tip  span  is  44.42  m,  and  the  ground  to  fm 
tip  distance  is  12.94  m.  Extension  of  past  test  method  to  the  eonimercial  jet  will  require 
ingenuity. 

Table  5.4  identiHes  the  lest  facilities  and  shows  approximate  test  capabilities.  Regarding  existing 
facilities,  full-scale  testing  of  commercial  jet  transport  aircraft  may  be  conducted  at  Oiyden  Research 
Center.  The  FAA  Technical  Center  improved  catapult  will  have  the  capability  to  test  small  jet 
transports  like  the  737,  DC-9,  and  the  F-28. 
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With  regard  to  testing  of  aubatructxirea  and  components,  NASA  Langley,  the  FAA  Technical  Center, 
and  CAMI  facilities  may  be  used.  The  CAMI  facility  is  designed  for  testing  seat/occupants. 

An  important  part  of  test  facilities  is  availability  of  adequate  instrumentation  and  data  acquisition 
equipment  At  a  minimum,  the  data  system  ^ould  be  able  to  record  accelerations  of  ±  750  g  at 
frequencies  of  600  Hz.  At  least  24  channels  of  this  type  data  should  be  available.  The  current  NASA 
practice  of  passing  the  data  through  a  600  Hz  low-pass  filter  prior  to  recording  may  be  restrictive  for 
stiff  substructures.  Also  high  frame-rate  (5000-10,000  pps)  photographic  coverage  should  be 
available.  At  least  three  cameras  are  needed  to  record  the  structural  response.  A  system  for 
accurately  indexing  the  photographic  records  to  the  electronic  instrumentation  is  necessary. 

ASSESSMENT  OF  TEST  CAPABIUTIES  FOR  JET  TRANSFORTS 

Based  on  the  above  discussions,  assessments  may  be  made  of  test  capability,  test  method  data, 
systems,  and  test  facilities  needed  to  conduct  the  research  and  development  programs.  The 
purpose  of  these  test  programs  is  to  increase  the  knowledge  of  the  crash  response  of  the  complete 
aircraft  and  components.  In  order  to  be  effective,  such  testing  must  provide  engineering  results  in 
much  greater  detail  than  that  currently  obtained  from  accident  investigations. 

Test  Methods 

Much  reseat  ch  is  t .  uired  to  develop  test  methods.  With  regard  to  testing  of  complete  aircraft,  the 
only  carryover  from  previous  testing  is  the  L1649  and  DC-7  tests,  which  apply  to  the  ground  to 
ground  scenario.  To  test  the  air-to-ground  and  the  flight-into-obstruction  scenarios,  remote  piloting 
techniques  to  control  crash  conditions,  and  reliable  onboard  data  acquisitioh  techniques  are 
required. 

Regarding  component  testing,  some  carryover  from  previou.<»  testing  pertains  to  the  testing  of 
seat/occupant/restraint  systems.  While  methods  of  testing  fer  individual  seat  units  have  been 
developed,  there  are  many  problems  yet  to  be  resolved.  Of  particular  concern  is  the  variation  in 
results  between  what  might  be  expected  to  be  imilar  tests.  Reference  65  shows  a  factor  of 
approximately  2  in  lap-belt  loads  that  is  attributed  ^o  the  use'  of  different  types  of  dummies.  The 
Army  is  concerned  about  this  problem  and  is  conducting  a  series  of  tests  in  which  the  same  type  of 
seat  and  identical  dummy  is  tested  to  the  same  conditions  at  N  ARDC,  CAMI  and  Simula,  Inc.  (ref. 
67).  The  results  of  these  tests  are  to  be  compared  in  an  attempt  to  resolve  the  differences  being 
observed. 

In  addition,  the  interface  between  seat  track  and  support  structure  needs  definition.  For  light 
aircraft  and  helicopters,  deformations  of  one  track  relative  to  the  other  is  usually  recommended. 
For  transport  aircraft  with  deep  floor  beams,  it  is  not  clear  that  such  relative  deformation  is 
obtainable  or  representative  of  crashes.  In  addition,  the  input  acceleration  pulse  is  yet  to  be 
determined.  Such  questions  as  how  many  seat  unita  or  how  much  floor  structure  are  necessary  to 
adequately  simulate  crash  conditions  are  unanswered.  Should  load  pulses  be  combined,  phased, 
and/or  applied  in  sequence?  How  do  restraint  systems  perform  under  such  conditions  and  what 
occupant  should  be  represented? 

Similar  problems  exist  in  testing  each  of  the  other  components.  In  particular,  how  are  crash  loads 
to  be  reacted  at  the  test-specimen  boundaries  in  order  to  cause  the  structure  to  simulate  the  crash 
dynamics  of  an  accident?  For  instance,  how  much  fuselage  must  be  tested  in  simulating  the  air-to- 
ground  scenario?  The  ground-to-ground  scenario?  Are  wing  reactions  necessary?  Further,  does  the 
nature  of  the  crash  response  change  as  a  function  of  crash  initial  conditions? 


To  answer  the  kinds  of  questions  present  above,  correlation  between  component  testing  and 
complete  aircraft  testing  is  necessary.  Also,  validated  analytical  methods  are  needed  to  extend  test 
results  to  regions  where  testing  is  impractical  and  to  correct  results  where  crash  boundary 
conditions  cannot  be  matched. 

Data  Systems 

Data  acquistion  and  processing  systems  developed  for  the  NASA/FAA  general  aviation  program  and 
the  CAl^  seat  program  are  sufficient  to  start  test  programs.  However  further  development  of 
improved  high  g/high  frequency  accelerometers  is  needed.  In  addition  rehable  displacement 
measuring  devices  are  needed  for  dynamic  deflection  and  qiring  back  measurements. 

In  the  area  of  photography,  methods  of  obtaining  good  quality  high  frame-rate  (5000-10,000  pps) 
pictures  in  the  crash  environment  are  needed  to  record  detailed  structural  behavior.  Research  into 
low-light-level  television  and  methods  of  computerized  picture  enhancement  and  data  extraction 
could  greatly  increase  the  data  obtained  and  reduce  data  reduction  time. 


Test  Facilities 

Complete  aircraft  testing  appears  feasible  at  the  Dryden  Crash  Test  Range  and  at  the  pianned  FA  A 
Tedmical  Center  catapult  Instrumentation  at  both  facilities  is  open  to  question.  At  Dryden,  onboard 
data  systems  are  supplemented  by  telemetry  used  for  flight  testa.  The  telemetered  data  are  of  a  low 
frequency  and  of  dubious  value.  Technical  (^ter  catapult  data  system  has  not  been  defined  to 
date. 

The  CAMI  seat  test  range  appears  adequate  for  near  term  testing  of  individual  seat  units.  Testing  of 
larger  groups  of  seats  and  substructure  may  require  testing  in  other  facilities.  Other  components 
might  be  tested  in  the  aesorted  catapults,  drop  tower,  and  swing  towers  depending  on  the  problems 
of  simulating  the  crash. 

ASSESSMENT  OF  IMPACT  RESISTANCE  TECHNOLOGY 

Current  impact  resistancs  design  technology  is  based  on  the  lessons  learned  from  accident 
experience.  Technology  is  continually  being  improved  to  reflect  the  latest  experience.  From  these 
lessons,  experienced  engineering  design  practices  have  evolved.  These  practices  have  developed  a 
high  level  of  impact  resistance  in  the  ctirrent  commercial  jet  transport  fleet 

The  design  technology  has  shortcomings  in  that  most  crash  response  mechanisms  are  unknown. 
There  is  a  lack  of  qimntitative  methods  for  engineering  analysis.  There  also  is  a  lack  of  deHnitive 
crash  loads.  This  hsis  led  to  comparison  of  designs  to  existing  capability.  While  this  process  has  been 
successful  where  a  data  base  exists,  there  is  concern  for  new  configurations  and  advanced 
materials  application  for  which  no  accident  data  base  exists. 

Test  methods  for  complete  aircraft  and  for  structural  components  need  development  The  most 
recent  transport  aircraft  crash  test  was  in  1964  with  limited  results.  Jet  transport  structural 
component  testing  to  siirulate  crash  conditions  needs  development  Size  and  initid  conditions  of 
such  testing  introduces  a  new  set  of  test  problems.  Adaptation  of  existing  facilities  and  the 
development  of  new  facilities  needs  research.  Eusting  test  facilities  and  methods  could  serve  as  a 
starting  point  for  a  test  program. 

Existing  analytical  methods  are  research  tools.  Many  programs  have  technical  shortcomings  for 
crash  simulation  and  are  not  completely  validated,  but  if  validated  could  contribute  significantly 


to  teat  planning,  prediction  of  reaulta  baaed  on  atate-of-tbe-art  knowledge  and  theory,  and 
poatcraah  data  analyaia  for  complex  interactiona.  Model  techniquea  and  atructural  data  baaes  to 
support  craah  aimulationa  for  both  atructural  componenta  and  complete  aircraft  needa 
development.  Further,  the  programa  need  modification,  both  to  make  them  uaer  oriented  before 
they  can  become  engineering  tools  and  to  reduce  the  large  coat  of  analyses. 

For  aeat/occupant  modeling  the  programa  have  reached  a  more  advanced  stage  of  development 
than  the  structures  analyaia  programa.  However,  more  complete  representation  of  the  occupant 
and  surface  contact  would  permit  better  simulation  of  occupant  response.  Problems  exist  in 
relating  the  analytical  output  to  human  injury. 

As  an  overview,  tlie  problems  have  been  deAned  and  some  analytical  and  experimental  methods 
and  facilities  are  available.  It  appears  that  the  ingredients  for  research  and  development  program 
exist.  With  the  advent  of  advanced  aircraft  the  impact  response  problems  take  on  added 
significance. 

RESEARCH  TO  IMPROVE  CRASHWORTHINESS  TECHNOLOGY 

Requirements  for  research  and  development  effort  that  will  result  in  improved  technology  for 
cra^worthiness  engineering  of  commercial  transport  aircraft  are  presented.  The  re*4uired 
technology  is  discussed  in  terms  of  disciplines.  Problem  areas  for  current  and  advanced  transport 
aircraft  are  identified,  and  areas  of  research  and  development  are  discussed. 

REQUIREMENTS  FOR  IMPROVED  TECHNOLOGY 

Based  on  the  assessment  of  the  current  state  of  technology  four  goals  must  be  achieved  to 
significantly  improve  craahworthiness  engineering  for  commercial  jet  transport  aircraft. 

First,  definition  of  the  survivable  crash  environment  is  required.  This  definition  should  include 
crash  loads  and  displacements  for  each  scenario.  Rational  relationships  between  the  crash  loads 
and  displacements  and  the  range  of  initial  conditions  with  various  hostile  environments  should  be 
established. 

Second,  an  understanding  of  the  crash  response  mechanisms  of  structural  components  and  of 
complete  aircraft  in  tneae  scenarios  is  required.  The  effects  of  factors  influencing  these 
mechanisms  must  be  understood. 

Third,  validated  analytical  modeling  and  test  engineering  methods  must  be  developed.  These 
methods  should  be  capable  of  treating  structural  components,  occupant  response,  and  complete 
aircraft.  Further  the  methods  must  be  usable  in  engineering  applications. 

Fourth,  human  factors  and  injury  mechanisms  for  commercial  transport  occupants  must  be 
defined.  The  relationships  between  engineering  quantities  such  as  acceleration  pulm,  impact 
loads  and  displacements,  and  occupant  injury  are  necessary  to  provide  adequate  levels  of  occupant 
protection. 

Achievement  of  these  four  goals  will  permit  detailed  engineering  of  craahworthiness  to  a  level  not 
now  available.  Improved  technology  arill  permit  deai^  considerations  affecting  craahworthiness 
to  be  treated  on  a  more  rational  ba^  and  to  more  fully  participate  in  the  deaign  process.  Further, 
as  advanced  deaign  concepts  and  materials  are  considered,  crashworthiness  requirements  may  be 
more  fully  anticipated  than  in  the  past 
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"Mature”  craabworthineas  technology  might  be  envisioned  as  Hve  major  areas  of  activity.  Each  of 
these  areas  leads  to  the  quantification  of  crashworthiness  parameters  and  understanding  of  crash 
phenomena  in  order  that  protection  for  occupants  might  be  improved. 

The  Hve  areas  of  activity  are  shown  in  figure  5.9.  The  areas  are  deHned  to  the  third  level  of  detail. 
It  is  expected  that  technology  will  evolve  as  the  program  progresses. 

DATA  BASE 

Data  base  activity  treats  the  collection  and  maintenance  of  data  germane  to  structural 
crashworthiness  and  occupant  protection. 

The  data  base  has  been  divided  roughly  into  four  categories;  crajh  statistics,  scenario  refinement, 
performance  norms,  and  human  factor  data.  For  the  most  part,  the  activities  under  each  of  these 
categories  are  self  evident  and  in  many  instances  represent  an  extension  of  ongoing  efforts  and  of 
studies  conducted  herein. 

With  respect  to  the  establishment  of  survivable  crash  initial  conditions,  mere  applications  of  the 
work  of  Wingrove  et  al.  (ref.  68)  in  conjunction  with  the  NTSB  could  improve  the  deHnition  of  the 
crash  conditions.  Accurate  deAnition  of  the  initial  conditions  could  enable  accidents  to  be  used  in 
simulations  to  better  deAne  the  environment  in  scenarios.  Such  results  would  augment  the  data 
from  crash  testing  full  scale  aircraft. 

To  assist  the  NTSB  in  developing  structural  data  for  crashworthiness  from  accidents,  an 
investigation  team  of  research  and  engineering-oriented  people  from  government  is  proposed.  This 
team  would  inspect  selected  accidents  to  obtain  data'  on  the  crash  performance  of  structural 
systems.  It  is  recocpiized  that  o  high  level  of  cooperation  between  the  NTSB  and  the  team  must 
exist  for  such  an  endeavor.  However,  the  increase  in  the  amount  of  engineering  data  from 
acci.dents  could  be  substantial. 

Human  factors  area  needs  better  deAnition.  Considerable  attention  has  been  directed  toward 
occupant  injury  mechanisms.  However,  with  improved  structural  and  occupant  modeling, 
interactions  between  occupant  and  the  restraint  system  and  with  the  surroundings  may  be  studied 
for  improved  design.  Of  partictilar  importance  is  the  development  of  a  relationship  between 
engineering  parameters  and  occupant  injury.  Improved  deAnitidns  of  occupant  modeling 
parameters  such  as  spring  constants,  damping  ratios,  and  kinematics  should  be  developed  for 
simulatioos  snd  for  anthropomorphic  dummies. 

METHODS  AND  PACIUTIES 

The  methods  and  fadliUes  area  is  concerned  with  development  and  validation  of  analytical  and 
experimental  methods,  test  facilities,  and  simulation  techniques. 

Current  analytical  programs  such  ss  KRASH,  DYCAST,  and  MSOM-LA  should  be  kept  up  to  date 
and  extended.  Updating  relates  to  modem  program  architectitfs  to  reduce  consumption  of 
computer  resources  and  to  facilitate  user  application.  Further,  with  the  advent  of  more  powerful 
computers,  existing  codes  should  be  rewritten  to  reflect  thees  advances. 

Extension  of  the  analyses  should  more  accuntely  depict  the  behavior  of  the  structure.  Occupant 
models  should  be  extended  to  provide  for  3*D  response  and  for  multiple  occupants  in  a  seat  unit. 
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For  instance,  the  inclusion  of  accurate  modeling  of  seat  structure  and  restraint  harness  in 
occupant  models  to  depict  the  interaction  between  occupants  and  structure. 

Structiual  programs  should  be  extended  to  permit  accurate  representation  of  fluid  pressures  in 
fuel  tjinka  under  sudden  accelerations  for  the  tank  rupture  problem.  Where  multiple  failure  modes 
ate  possible,  heuristic  logic  may  be  incorporated  in  the  coding  to  permit  the  dynamic  response  to 
follow  ‘ininimum  energy”  paths.  These  types  of  approaches  may  even  lead  to  using  the  computer 
to  optimize  the  model  while  processing  the  data. 

Development  of  modular  analysis  systems  that  permit  the  analyst  to  use  only  the  modules 
necessary  for  the  solution  of  problem  at  hand  is  needed.  While  it  is  desirable  tO'  enhance  the 
capability  of  the  analysis  system,  it  should  not  be  necessary  to  drag  all  these  additional  features 
into  the  computer  for  every  problem.  For  instance,  if  one  is  analyzing  floor  structure  only,  then 
modules  and  storage  for  occupant  response  or  hydrodynamic  forces  may  not  be  needed.  Efficiont 
uae  of  computer  resources  is  a  must 

Analytical  methods  and  models  for  simulation  of  boundary  conditions  needs  to  be  improved. 
Current,  programs  introduce  loads  into  the  models  through  springs  or  through  fixed  boimdaries. 
Accurate  representation  of  this  process  is  necessary  if  detailed  simulated  structural  behavior  is  to 
be  achieved. 

The  level  of  validation  achieved  for  the  analytical  tools  will  affect  the  usefulness  of  the  tools  for 
engineering  purposes.  Hence,  every  effort  is  needed  to  improve  fldelity  of  analytical  results  in 
simulating  the  crash  response  of  structure.  Experience  and  supporting  data  for  modeling  that  will 
extend  the  applicability  of  analytical  methods  and  develop  confidence  in  engineering  application  are 
needed. 

Craahworthineas  test  method  research  and  development  is  separated  into  four  areas: 
instrumentation  and  ^ts  processing,  dynamic  procedures,  static  procedures,  and  scale  modeling. 
Effort  in  these  areas  is  needed  tp  improve  current  techniques  to  better  represent  crash  conditions, 
to  permit  the  study  of  structural  subsystems,  to  acquire  data  for  hybrid  simulation,  and  to  allow  the 
use  of  scale  models  for  testing  large  aircraft  or  components. 

While  a  crash  may  have  a  duration  of  many  seconds  from  initial  impact  to  final  arrestment,  the  critical 
deformation  of  structure  may  occur  in  milliseconds.  This  small  time  imposes  severe  sampling 
requirements  on  instrumentation.  Current  test  data  contains  errors  due  to  accelerometer  drift, 
coordination  of  events,  and  to  processing  problems.  Further,  deflnition  of  actual  response  may  be 
incomplete.  Deflections  shpuld  be  dynamically  measured  to  properly  account  for  the  sequence  of 
failures  and  the  effects  of  spring-back.  In  addition,  the  instrumentatkm  must  be  sufficiently  rugged  to . 
withstand  the  crash  environment  and  still  function  properly. 

Reeearch  and  development  is  needed  to  improve  the  messurement  of  accelerations,  velocities,  and 
deflections  under  test  conditions.  The  application  of  laser  techniques  should  be  investigated. 
Photography  is  particularly  difficult  and  efforts  to  extend  the  coverage  to  high-frame  rates  is  needed. 
Picture  enhancement  procedures  developed  for  space  exploration  may  have  application. 

Further  effort  is  needed  to  handle  the  vast  quantities  of  informatum  obtained  in  a  test  and  to  present 
this  information  in  a  readily  digeatible  format.  This  is  particularly  true  of  photographic  data. 

Dynamic  test  procedures  msy  be  separated  into  complete  aircraft  testing  and  structural 
subsystems  tests.  Methods  of  testing  complete  aircraft  are  complicated  simply  by  the  scale  of  the 
model.  The  up-coming  test  of  the  720  aircraft  in  1984  will  suggest  further  areas  for  development 


Procedures  for  testing  structural  subsystems  need  further  development.  Current  test  methods  for 
testing  seats/occupant’restraints  have  provided  good  data.  However,  these  methods  are  limited  in 
model  size,  and  in  the  crash  pulse,  which  may  be  simulated.  In  addition,  the  construction  and 
insCnurentation  of  occu;oant  models  still  raise  many  questions.  In  many  respects,  these  problems  are 
facility  related. 

Some  testing  of  structural  subsystems  has  been  accomplished  on  fuel  famka  and  fuselage  sections 
for  small  aircraft.  These  testa  have  been  limited  in  direction  of  impact  loads  and  in  size  of  the  test 
specimen.  Extension  of  these  methods  to  other  subsystems  and  to  a  more  complete  range  of  load 
conditions  requires  effort.  Further,  the  proper  representation  of  structural  boundary  conditions 
and  of  external  loads  is  needed. 

Static  test  results  have  been  found  to  be  useful  in  obtaining  input  data  for  adulations  involving 
some  lightweight,  highly  stiff  substructures.  Methods  for  conducting  theee  types  of  tests  need 
development  In  particular,  methods  of  applying  loads  statically  to  simulate  ^e  dynamic  load 
distribution  are  required.  Further,  a  method  of  maintaining  the  applied  loads  and  their  directions 
through  the  large  structural  deflections  is  needed. 

Scale  modeling  for  crash  testa  to  provide  data  at  reduced  costs  and  m  a  timely  manner  should  be 
investigated.  While  scaling  laws  for  crash  testing  are  known,  limitations  on  the  method  need  be 
developed  particularly  with  regard  to  model  details  and  for  orthotopic  materials  such  as 
composites.  Problems  may  exist  with  regard  to  ply  thickness  and  fabrication  methods  for  these 
materials. 

FAGniriES 

It  is  expected  that  as  crashworthiness  research  and  development  progress,  extension  of  existing 
facilities  will  be  required.  For  some  types  of  testing  new  facilities  may  be  needed.  A  part  of  the 
total  program  is  up^ting  of  existing  facilities  and  development  of  new  facilities. 

As  some  facilities  already  exist  in  the  FAA,  NASA,  the  military,  and  industry,  a  team  approach  to 
facilities  development  should  be  used.  An  overview  committee  of  interested  parties  should  provide 
goals  and  policy  for  *xpamiion  and  development  of  the  necessary  facilities. 

SIMULATION  TECHNIQUES 

Methods  of  simulation  need  development  Methods  of  modeling  to  use  analytical  tools  and  of 
testing,  to  identify  crash  response,  reed  to  be  developed  to  levels  suitable  for  engineering 
application.  Various  approach  should  be  veriHed  eod  validated.  As  better  methods  are 
dweloped,  this  information  ihould  be  made  availsble.  - - 

COMPLETE  AIRCRAFT  TESTING 

Crash  testing  of  complete  highly  instrumented  airenft  is  divided  into  three  areas:  identification  of 
crash  response  mechanisms,  structural  subsystem  performance,  and  advanced  concept  evaluation. 
Each  of  these  areas  is  treated  below' 

Complete  aircraft  tests  are  required  to  identify  the  structural  crash  response  mechanisms 
induing  the  interaction  of  various  subsystems.  Induded  in  this  area  are  evaluation  of  crash  loads, 
structural  response,  acceleration  environment,  and  scenario  definition. 

Crash  loads  and  acceleration  environment  will  provide  data  for  comparison  with  calculated  valuM. 
Ilieee  data,  in  conjunction  with  data  derived  from  seddents,  may  be  used  to  aseess  the  adequacy  of 


crashworthiness  for  complete  aircraft.  Structural  response  will  provide  deflection,  failure  mode, 
and  sequence  data  useful  to  the  assessment  of  engineering  methods  such  ae  simulation  and 
modeling.  Further,  it  may  be  used  to  evaluate  and  refine  crash  scenarios. 

Structural  subsystem  crash  performance  may  be  obtained  in  the  complete  aircraft  test.  Loads 
experienced  by  the  subsystems  may  be  obtained  for  comparisons  with  design  values  and  for  use  in 
subsystem  testing.  Failure  modes  and  sequence  may  be  obtained  imduding  effects  of  interaction 
with  other  subsystems.  Energy  absorption  characteristics  of  the  subsystem  may  be  assessed  and 
the  adequacy  of  its  crash  performance  may  be  assessed. 

Complete  aircraft  tests  should  also  be  used  to  evaluate  advanced  crashworthiness  concepts.  For 
instance,  applications  of  advanced  materials  or  energy  absorption  designs  for  various  subsystems 
may  be  assirased.  Effects  of  such  components  on  cra^  loads  and  envirr.nment  may  be  evaluated. 

As  part  of  this  testing,  the  contribution  of  the  various  subsystmns  in  reducing  the  fire  hazard  and 
in  protecting  the  occupants  may  be  evaluated.  Further,  the  full-scale  crash  tests  afford 
opportunity  to  refine  the  definition  and  relate  crash  loads  and  displacements  to  scenarios. 

STRUCTURAL  SUBSYSTEMS 

Research  into  the  crash  behavior  of  structural  subsystems  consists  of  both  analysis  and  test. 
Emphasis  is  placed  on  treatment  of  subsystems  because  the  subsystems  must  perform  their  crash 
function  in  order  to  achieve  crashwortLlness  for  complete  aircraft  Further,  it  is  in  detailed 
mechanisms  of  failure  that  engineering  changes  may  be  affected.  In  addition,  in  testing  the 
subsystem,  detailed  crash  response  of  the  subsystem  may  be  better  measured  than  from  complete 
aircraft  testing. 

The  potential  for  improved  crash  performance  for  structural  systems  has  been  assessed  to  provide 
some  guidance  for  the  planning  of  a  research  program.  The  potential  for  improved  performance  is 
assessed  relative  to  the  crash  function.  On  this  basis  the  assessment  in  table  5.5  is  presented. 

The  rating  potential  for  improved  performqn<»  is  given  in  relative  terms;  C  being  good  potential,  B 
being  better,  and  A  being  best.  These  ratings  are  subjective  and  do  not  reflect  the  difficulty  in 
advancing  the  technology.  It  i^  expected  that  some  ratings  will  change  as  the  research  and 
'development  program  progresses. 

Analytical  research  treats  the  methods  of  modeling  the  subsystem  to  depict  detailed  crash 
response.  Subsystems  of  immediate  interest  ate  wing  tankage,  aeat/occupant,  floor/seat/occupant, 
and  fuselage  sections.  In  this  endeavor,  the  full  power  of  analytical  programs  may  be  us^  to 
represent  the  structure  in  detail  Results  of  these  analyses  should  be  validated  with  subsystems 
tests.  Computer  programs  may  be  assessed  for  technical  defidencieS  and  simulation  techniques 
may  be  developed  for  engineering  application. 

Testing  of  structural  subsystems  will  permit  identification  of  detailed  failure  mechanisms  and 
sequences  of  events  in  simulated,  crash  conditions.  In  additiem.  these  results  may  serve  as  a  basis 
for  comparison  for  the  evaluation  of  advanced  concepts.  In  many  instances,  representative  metal 
structure  suitable  for  testing  may  be  obtained  from  overaged  transports  being  retired  from  service. 
Further,  such  structura  specimens  are  within  the  test  capacity  of  some  existing  facilities. 

Advanced  material  applications  for  some  subsyctems  may  also  be  tested  as  a  part  of  the  metal 
specimens.  As  the  applications  advance,  new  specimens  may  have  to  be  fabricated. 


Subsystems  should  be  tested  over  a  range  of  initial  conditions  compatible  with  those  used  for 
complete  aircraft. 

ADVANCED  CONCEPTS 

Research  and  development  for  advanced  crashworthiness  concepts  includes  areas  of  new 
materials,  energy  absorbing  applications,  and  a  general  category  called  “construction  concepts.”  It 
is  anticipated  that  as  crashworthiness  technology  is  developed  and  as  new  structures  and  materials 
technology  is  applied  to  aircraft  design,  advanced  concepts  may  be  necessary  to  provide  occupant 
protection  in  crashes. 

The  new  materials  area  is  concerned  with  developing  technology  for  understanding  failure 
mechanisms,  and  for  increasing  impact  re^tance  and  energy  absorption  characteristics  of  these 
materials,  principally  composites.  The  effort  treats  materials  at  coupon  or  small  specimen  level, 
and  de^  with  effects  of  hybrid  materials,  ply  orientation,  etc. 

Fire  resistance  of  advanced  materials  should  be  invmtigated  in  both  small  sp^imens  and  in 
structural  components.  Methods  of  improving  bum  characteristics  should  be  evaluated.  Structural 
performance  of  these  components  in  the  presence  of  crash  heat  pul^  should  be  understood. 

Energy-absorbing  applications  are  concerned  with  seats  and  immediate  occupant  surroundings  and 
with  “parasitic”  materiala/devices  introduced  speciHcally  to  provide  energy  absorption.  An 
eiample  of  the  latter  is  crushable  material  applied  at  the  underside  of  the  fuselage  to  provide 
energy  absorption. 

Construction  concepts  are  concerned  with  effects  of  application  of  the  advanced  materials  to 
aircraft  details  and  components  on  the  crashworthiness  of  aircraft  conngurations.  At  this  time, 
the  crash  response  of  aircraft  primary  structure  made  with  new  materials  is  unknown.  It  is 
conceivable  that  historic  crash  functions  of  the  aircraft  subsystems  may  have  to  be  modified  in  this 
process  and  new  strategies  for  protection  of  occupants  devised. 


6.0  CONC3.USIONS  AND  RECOMMENDATIONS 


One  hundred  and  fifty-three  jet  transport  accidents  have  been  studied  in  depth.  The  status  of 
structural  crashworthiness  technology  has  been  reviewed.  Conclusions  resulting  from  these  studies 
are  presented  and  discussed.  Based  on  these  conclusions,  problem  areas  relating  to  commercial 
transport  are  identified  for  future  research  and  development.  Finally,  a  research  and  development 
program  is  recommended. 

When  considering  all  the  commercial  air  transportation  system  safety  related  problem  areas  it  is 
believed  that  the  most  significant  reduction  in  fatalities  can  be  achieved  by  simply  reducing  the 
number  of  accidents.  No  significant  technological  breakthroughs  are  required  to  achieve  this  goal.  In 
section  2,  it  was  shown  that  approximately  76%  of  the  commercial  jet  aircraft  accidents  have  been 
attributed  to  cockpit  crew  factors.  Therefore,  research  and  study  of  these  factors  in  areas  of  cockpit 
design,  system  design,  and  crew  human  factors  should  receive  major  emphasik 

Another  safety-related  problem  area  is  the  airport  environment.  Studies  of  ground  traffic  control 
systems  end  ground  operation  procedures  should  be  directed  toward  elimination  of  collision 
accident  The  severity  of  many  veer-off  and  overrun  accidents  could  be  substantially  reduced  if 
hazards  on  and  around  the  airport  were  eliminated. 

Current  commercial  jet  transport  aircraft  possess  a  high  level  of  crashworthiness.  This  is  due  in  part 
to  stronger  structure,  less  volatile  fuel  and  improved  design  methods.  Design  methods  are 
continually  being  improved  baaed  on  knowledge  gsiined  from  accident  experience.  It  is  desirable  to 
continue  t^  improvement  of  existing  designs  and  to  retsin  their  beneficial  characteristics  as  future 
designs  using  advanced  materials  and  concepts  are  developed.  To  achieve  this  will  require 
substantial  advances  in  structural  crashworthiness  technology. 

CONCLUSIONS  OF  THE  STRUCTURAL  CRASHWORTHINESS  STUDY 

First,  the  greatest  potential  for  improved  survivability  in  commercial  jet  transport  aircraft  accidents  is 
in  the  area  of  fire  related  fatalities.  Research  relating  to  prevention  of  fuel  fire  merits  the  highest 
priority.  Time  is  a  critical  element  associated  with  escape  when  a  severe  fuel  fire  exists  outside  the 
aircraft  or  when  the  aircraft  is  sinking  in  deep  water.  If  flame  and  smoke  enter  the  fuselage  passenger 
area  immediately  after  the  aircraft  comes  to  rest,  the  probability  of  escape  is  reduced  substantially. 
Retaining  fuselage  inUgiity  and  delaying  entrance  of  smoke  and  flame  is  essential  if  survivability  is  to 
be  enhanced.  Debris  and  obstructions  that  hinder  movement  of  persons  on  the  escape  route  cause 
delays  that  reduce  the  probability  of  survival.  Consequently,  fwtors  that  would  increase  the  available 
time  for  egress  or  reduce  the  time  required  for  egress  is  rasentiaL  Fuel  additives  as  in  the  anti¬ 
misting  kerosene  program,  rupture  resistant  fuel  tanks  or  ceils,  and  structural  improvements  to 
protect  fuel  tanks  and  occupants  should  be  sulqects  of  research. 

Second,  structural  integrity  of  fuel  systems,  fuselage,  and  landing  gear  are  leading  candidates  for 
improved  crashworthiness.  Structural  integrity  of  fuel  systems  is  a  key  factor  in  prevention  of 
postcraah  fire.  Integrity  of  the  fuselage  contributes  to  tte  reduction  of  fire  related  fatalities  by 
preventing  or  delaying  the  entry  of  fuel,  fire,  and  smoke  and  by  maintaining  egress  routes.  Main 
landing  gear  that  are  more  tolerant  to  off-nmway  conditions  would  continue  to  provide  ground 
clearance  for  the  wing  and  engine  pods  thereby  reducing  wing  breaks  and  tearing  of  tank  lower 
surfaces,  and  engine  pod  scrubbing  or  separation. 

Third,  where  trauma  fatalities  have  predominated,  the  energy  absorbing  protective  capability  of  the 
aircraft  structure  generally  has  been  expended  and  the  aircraft  has  experienced  major  structural 


damage.  This  is  discussed  in  section  5.  However,  trauma  fatalities  might  be  reduced  by  improving 
energy  absorption  capability  and  fuselage  structural  integrity.  While  current  occupant  seatyrestraint 
systems  have  performed  well  in  accidents,  little  is  known  of  the  relationship  between  occupant 
response  and  structural  dynamic  characteristics  of  the  seat,  floor,  and  fuselage.  Only  recently  has 
modeling  progressed  to  where  some  of  this  behavior  can  be  more  thoroughly  explored.  This 
becomes  particularly  important  for  applications  of  advanced  materials.  Further,  aircraft  occupant 
impact  tolerance  needs  improved  definition. 

CRASHWORTHINESS  PROBLEM  AREAS 

Based  on  these  conclusions,  problem  areas  for  future  structural  ■  'ashworthiness  research  and 
development  are  presented,  lliese  problem  areas  are  categorized  with  regard  to  current  ai'-craft, 
advanced  aircraft,  and  full-scale  crash  tests.  Within  each  category  problem  areas  are  presented  in 
order  of  priority.  The  problems  are  shown  in  figure  6.1. 

Postcrash  fire  hazard  reduction  through  the  development  of  fuel  additives,  improved  fire 
resistance  technology,  improved  occupant  egress,  and  fuel  containment  have  high  priority.  This 
subject  has  been  treated  in  the  SAFER  committee  recommendations  (ref.  69).  Structural  crash 
response  is  concerned  with  tank  rupture  mechanisms  and  with  cabin  interior  equipment.  Fuselage 
structural  integrity  also  plays  an  important  role  in  the  poetfire  hazard  by  preventing  entry  of  fuel, 
fire  and  smoke  through  breaks  in  the  fuselage  and  in  protecting  established  egress  routes  by 
maintaining  the  floor  structure  and  operable  doors  and  hatches. 

The  role  of  main  landing  gear  in  maintaining  ground  clearance  for  the  wing  and  fuselage  has  been 
seen  in  section  4.  A  gear  with  increased  resistance  to  separation  in  rough  terrain  may  reduce  the 
likelihood  of  wing  tank  breaks  and  tank  lower  surface  tears,  engine  pod  separation,  and  could  also 
eliminate  some  friction  flres. 

In  addition,  fuselage  structural  integrity  provides  the  occupant  with  a  protective  sheU  and  with 
energy  absorbing  load  paths.  Methods  of  increasing  break  resistance  of  the  fuselage  are  needed. 
Similiarly,  optimization  of  fuselage  energy  absorption  is  needed.  Improvement  of  structural 
integrity  will  tend  to  reduce  trauma  injury. 

Occupant  injury  reduction  is  concerned  with  floor/seat/occupant/restraint  systems.  The  system 
nonlinear  dynamic  response  needs  to  be,  understood.  Current  commercial  practice  defines  the 
problem  in  terms  of  static  enveloping  values  based  on  accident  experience.  For  new  lightweight 
seats,  the  effect  of  departures  from  proven  designs  on  occupant  hazards  or  injury  potential  should 
be  understood.  Of  particular  concern  is  dynamic  response  of  the  occujMmts  in  new  seats  as 
compared  to  conventional  seats  as  both  seat  and  occupant  interact  with  floor  acceleration  pulses. 
This  response  involves  the  complete  deat  system  from  floor  structure  and  seat  attachments  to 
impacting  surrounding  objects.  A  similar  problem  exists  for  the  conventional  seat  to  a  lesser 
extent.  Research  into  the  effects  of  the  pulse  on  both  the  seat  and  occupant  is  needed. 

Methods  of  accident-envelope  analyses  are  needed  for  assessing  crash  performance  of  aircraft  and 
structural  components.  Such  methods  provide  a  means  for  parametric  studies  and  extrapolation 
from  crash  test  and  accident  data  to  other  scenario  conditions.  Proven  simulation  techniques  are 
necessary  for  engineering  purposes. 

Crash  performance  assessment  of  the  aircraft  and  structural  components  needs  improvement. 
Since  cost  of  full-scale  aircraft  tests  precludes  many  tests,  it  is  important  to  extract  as  much 
engineering  data  as  possible  from  accidents.  For  some  accidents,  in  which  the  aircraft  has  not  been 
completely  destroyed,  additional  support  to  the  NTSB  by  impact  dynamics  research  personnel 
from  NASA  and  the  FAA  may  produce  more  data.  This  data  is  needed  to  study  accident  behavior 
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Figure  6. 1 -Structural  Crashworthiness  Problem  Areas 


with  analytical  methods  and  for  simulation  testing  of  structural  components.  In  addition,  such 
data  will  be  useful  in  refinement  of  the  accident  scenarios. 

Advanced  aircraft  problems  are  concerned  with  the  introduction  of  advanced  materials, 
graphite/epoxies  in  particular.  Problem  areas  exist  in  material  crash  performance,  advanced 
component  performance,  and  with  aircraft  occupant  protection  concepts.  Problems  with  material 
performance  includes  high  energy  impact  resistance  and  bum  characteristics.  Design  latitude 
afforded  by  these  materials  in  ply  orientation  and  introduction  of  modifying  materials  may  permit 
desirable  impact  characteristics  to  be  achieved.  With  regard  to  bum  characteristics,  these 
advanced  materials  may  provide  protection  to  the  occupant  by  not  melting  in  the  presence  of  a 
heat  pulse  while  retaining  a  char  barrier  and  by  reduced  friction  sparking. 

Crash  performance  of  stmctural  components  made  from  advanced  materials  must  be  compared  to 
that  of  current  structural  components.  Differences  in  performance  must  be  assessed  for  their 
effect  on  accident  performance  of  the  complete  aircraft.  Impact  response  mechanisms  of  advanced 
components  must  be  understood  in  order  that  accident  performance  might  be  optimized. 

New  occupant  protection  concepts  for  advanced  aircraft  may  be  required.  Current  metal  aircraft 
have  inherent  properties  contributing  to  crashworthiness  provisions  in  addition  to  other  design 
conditions  that  may  not  be  present  in  advanced  aircraft.  Consequently,  it  may  be  necessary  to 
introduce  new  approaches  to  occupant  protection. 

Since  accident  performance  of  full-acalS  aircraft  has  such  an  important  role  in  crashworthiness, 
problems  of  testing  full-scale  aircraft  must  be  addressed.  In  addition  to  technical  problems  of  test 
methods,  data  acquisition,  and  reduction,  the  severity  levels  of  the  tests  must  be  within  the 
envelope  of  survivable  accidents  for  maximum  application  of  the  results.  This  requires  further 
refmement  of  the  accident  scenarios  and  implies  some  knowledge  of  human  injury  tolerance.  These 
problems  should  be  resolved  prior  to  the  planned  test  of  the  720  aircraft. 

RECOMMENDED  RESEARCH  AND  DEVELOPMENT 

A  research  and  development  program  is  presented.  One  objective  is  to  understand  the  crash 
reqwnse  of  current  designs  and  to  develop  structural  impact  technology  that  might  improve 
current  commercial  jet  transport  aircraft  and  serve  as  a  basis  for  the  assessment  of  advanced 
aircraft  structure.  A  second  objective  is  to  understand  the  crash  performance  of  advanced 
structtural  components.  A  third  objective  is  to  obtain  crash  environmental  data  from  full-scale 
complete  aircraft  tests  for  validation  of  technology  and.  for  assessn^ent  of  crash  scenarios. 
Recommendations  are  given  for  current  metal  aircraft,  advanced  aircraft,  and  for  full-scale 
complete  aircraft  tests. 

CURRENT  METAL  AIRCRAFT 

Research  on  reduction  of  the  postcraah  fire  hazard  is  recommended.  SAFER  Committee 
leoonunendations  on  fuel  additives,  fire  resistance,  and  fuel  containment  tSchnology  are 
supported. 

With  respect  to  the  structural  role  in  fuel  containment,  research  into  the  various  mechanisms  of. 
tank  rupture  is  recommend^.  Experimental  and  analytical  methods  of  simulating  tank  rupture  in 
crash  conditions  should  be  developed.  Research  should  include  full-scale  aircraft  and  component 
testing  of  structural  improvements  and  of  devices  or  tschniques  to  reduce  the  fuel  flow  rate  from 
fractured  tanks. 


To  improve  occupant  egress,  the  effects  of  representative  cradt  accelerations  and  displacements 
on  containment  of  cabin  interior  equipment  and  contents  should  be  determined.  Galleys,  overhead 
compartments,  ceiling  panels,  lighting,  and  other  interior  appointments  should  be  studied  to  reduce 
blockage  of  egress  routes.  For  water  entry,  new  designs  and  techniques  for  storage  and 
deployment  of  life  rafts  and  floatation  equipment  that  will  facilitate  egress  and  eliminate  blockage  of 
exits  should  be  developed. 

Research  to  improve  structuural  integrity  of  the  fuselage  is  recommended.  Studies  into  the 
mechanisms  of  fuselage  breaks,  maintenance  of  protective  ahdl,  optimization  of  energy  absorption, 
distortions  at  doors  and  hatches  and  floors  for  the  crash  scenarios  should  be  done.  To  accomodate 
water  entry,  studies  of  design  improvements  that  will  eliminate  tearing  and  rupturing  of  the  fuselage 
lower  surface  by  hydraulic  action  of  the  water  (some  inward  crushing  would  be  tolerable)  thus 
improving  the  floatation  capability  should  be  done. 

Main  landing  gear  accident  performance  in  rough  (errain  should  be  studied.  Crash  loads  and 
displacements  for  existing  gear  concepts  for  representative  hazards  should  be  determined.  The 
interaction  of  the  gear  and  the  attaching  structure  should  be  understood.  Advanced  concepts  for 
improved  crash  performance  should  be  developed. 

Research  for  trauma  injury  reduction  is  recommended.  Studka  to  ascertain  the  effects  of  fuselage 
structural  arrangement  on  the  acceleration  impulse  and  floor  displacement  experienced  at  the  points 
of  seat  attachment  should  be  conducted.  Effects  of  the  shape,  magnitude,  and  duration  of  the  seat 
acceleration  impulse  on  aeatyoccupant/restraint  system  responae  should  be  obtained  for  current 
seats  and  for  new  lightweight  seats.  Also  seat  capability  in  terms  of  both  static  and  dynamic  loading 
should  be  established.  Effects  of  occupant  parameters  such  as  mass,  size,  distribution,  occupant 
accelerations,  restraint  effectiveness  and  seat  deformation  should  be  obtained.  Effort  should  be 
made  to  relate  engineering  measurements  to  occupant  injury  and  injury  indices. 

Crash  envelope  analyses  need  to  be  developed  for  assessment  of  crashworthiness.  Existing 
computer  programs  such  as  KRASH  and  OYCAST  may  serve  as  a  starting  point.  Limits  of  validity 
of  such  analyses  need  to  be  established.  Methods  of  accidoit  simulation  and  the  data  base  to 
support  this  approach  should  be  developed.  The  technology  of  these  methods  should  be  extended. 

Research  for  crash  performance  assessment  should  be  done  to  refine  the  accident  scenarios. 
Efforts  to  obtain  data  from  selected  accidents  to  better  define  tlie  initial  conditions  and  the 
sequence  of  events  are  needed.  Engineering  data  for  accident  simulatioD  shotild  be  obtained. 

ADVANCED  AIRCRAFT 

Research  is  recommended  in  high  energy  impact  for  advanced  materials  such  as  graphite/epoxy. 
Effects  of  design  parameters  on  impact  resistance  should  be  determined.  Ways  to  increase  impact 
resistance  and  burn  characteristics  should  be  sought. 

With  respect  to  advanced  components,  a  program  to  detetmine  crash  performance  should  be 
conducted.  Analytical  and  experimental  crash  simulations  should  be  made.  Advanced  component 
performance  should  be  compared  to  current  components  and  differences  identified.  Met’  s  of 
modifying  the  performance  should  be  explored. 

It  is  anticipated  that  impact  resistance  of  advanced  materials  and  energy  absorption 
characteristics  of  components  made  of  these  materials  may  bs  Sufficiently  different  from  current 
metal  aircraft  that  new  concepts  of  occupant  protection  might  be  needed.  Of  particular  concern  are 


wing  tanks,  fuselage  integrity  including  energy  absorption,  and  the  floor/seat/  occupant/restraint 
system.  New  approaches  to  occupant  protection  should  be  investigated. 

FULL^ALE  CRASH  TESTS 

The  planned  720  crash  test  should  be  instrumented  to  obtain  data  on  structural  components  and 
seatyoccupant/restraint  systems.  Crash  response  modes  and  loads  on  both  the  structural 
components  and  the  seat/occupantyrestraint  astern  should  be  obtained.  Full-scale  tests  should  be 
used  to  refine  the  scenario. 

Depending  on  the  success  of  the  720  test,  additional  full  scale  crash  tests  should  be  considered. 
Future  tests  would  serve  to  evaluate  other  jcenarios  and  to  more  completely  deAne  the  crash 
e-ivir)nment  and  crash  response  mechanisms.  They  would  also  be  useful  for  validation  of  anal3^cal 
methods.  As  advanced  materials  are  incorporated  into  future  aircraft,  full-scale  tests  for  occupant 
protection  concept  validation  should  be  considered.  An  objective  of  this  program  is  to  minimize  the 
need  for  full-scale  crash  testa. 

RECOMMENDED  PROGRAM 

The  program  recommended  for  inclusion  in  the  planning  for  the  NASAyFAA  Crashworthiness 
Research  program  for  General  Aviation  and  Commercial  Jet  Transport  Aircraft  is  given.  While  the 
complete  development  of  the  crashworthiness  technology  is  a  worthy  goal  only  major  segments  are 
suggested. 

Major  segments  of  the  program  are  identiHed.  A  strong  emphasis  is  placed  on  the  performance  of 
advanced  composites.  The  segments  include  fuel  containment,  fuselage  integrity/energy 
absorption,  flooryseatyoccupant  response,  complete  aircraft  response,  accident  investigation, 
component  performance,  and  support  technology.  The  elements  of  these  segments  have  been 
discussed  in  the  body  of  the  study  and  in  section  5  in  particular. 

A  tenative  schedxile  through  1990  for  the  recommended  segments  in  the  NASAyFAA  research  and 
development  program  pertaining  to  commercial  jet  transport  aircraft  is  shown  in  figum  6.2.  The 
schedule  iis  based  on  task  priority,  current  state  of  the  technology,  estimates  of  available  facilities, 
and  timeliness  to  aircraft  applications. 

! 

Boeing  Commercial  Airplane  Company 
P.O.Box  3707 
Seattle,  Washington  98124 

August  10, 1981  ' 
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APPENDIX  A 


Accident  De^nition 

(As  Defined  by  the  National  Transportation  Safety  Board) 


“Aireraft  acddeot”  meana  an  occurraice  aaaociated  with  the  operation  of  an  aircraft  which  takes 
place  between  the  time  any  person  boards  the  aircraft  with  the  intention  of  flight  until  such  time 
as  all  such  persons  have  disembarked,  in  which  any  person  suffers  death  or  senous  injury  as  a 
result  of  being  in  or  upon  the  aircraft  or  by  direct  contact  with  the  aircraft  or  anything  attached 
thereto,  or  the  aircraft  receives  substantial  dami'ge. 

*t)perator”  means  any  person  who  causes  or  authorizes  the  operation  of  an  aircraft,  such  as 
the  owner,  lessee,  or  b^ee  of  an  aircraft 

*Fatal  injury”  means  any  injury  which  results  in  death  within  7  days. 

‘Serious  injury”  means  any  injury  which  (1)  requires  hospitalization  for  more  than  48  hours, 
commencing  within  7  days  from  the  date  the  injury  was  received:  (2)  results  in  a  fracture  of 
any  bone  (except  simpie  fractures  of  fmgers,  toes,  or  nose):  (3)  involves  lacerations  which 
cause  severe  bsmorrhages,  nerve,  muscle  or  tendoii  damage:  (4)  involves  injury  to  any 
internal  organ;  or  (5)  involves  second  or  third  degree  bums,  or  any  bums  affecting  more  than 
5  percent  of  the  body  surface. 

Hull  loss”  means  damage  due  to  an  accident  which  was  too  extensive  to  repair  or,  for 
economic  reasons,  the  aircraft  was  not  repaired  and  returned  to  service. 

"Substantial  damage” 

(1)  Except  as  provided  in  subparagraph  (2)  of  this  paragraph,  substantial  (damage 
means  daxnage  or  structural  failure  which  adversely  affects  the  structural 
strength,  performance,  or  flight  characteristics  of  the  aircraft,  and  which  would 
normally  require  major  repair  or  replacement  of  the  affected  component. 

(2)  Engine  failure  damage  limited  to  an  engine;  bent  fairings  or  cowling;  dent^  skin; 
mell  punctured  holes  in  the  skin  or  fabric.  Damage  to  landing  gear,  wheels,  tires, 
flaps,  engines  accessories,  brakes,  or  wing  tips  are  not  considered  ‘substantial 
damage”  for  the  purpose  of  this  part 

A  "survivable”  accident  is  one  in  which  the  fuselage  remains  relatively  intact  the  crash 
forces  do  not  exceed  the  limits  of  human  tolerance,  there  are  adequate  occupant  restraints, 
and  there  are  sufficient  escape  provisions. 


APPENDIX  B 


The  following  1980  accidents  would  be  good  candidates  for  additional  study:. 

1.  707  2/27/80  China,  Manila,  hull  loss,  3  of  135  were  fatalities,  severe  Hre,  hard 

touchdown,  wing  failed. 

2.  707  5/11/80  Sobelair,  Doucela,  Cameroon,  hull  loss,  no  fatalities,  no  fire,  veer 

off. 

3.  IrlOll  8/19/80  Saudi,  Riyadh,  hull  loss,  301  fatalities,  cabin  Hre  in  flight,  landed 

but  no  evacuation. 

4  .  727  9/3/80  Pan  Am,  San  Jose,  Costa  Rica,  hull  loss,  no  fatalities,  touchdown 

short,  no  fire. 

5.  737  10/6/80  Air  Florida,  Port  au  Prince,  substantial  damage,  no  fatalities, 

veered  off  runway,  separated  gear,  fuel  leak  through  crack  in 
fitting. 

6.  747  11/19/80  Korean,  Seoul.  Korea,  hull  loss,  14  of  226  were  fatalities,  severe  fire 

(nonfuel)  touchdown  short,  gear  separated. 

7.  727  11/21/80  Air  Micronesia,  Yap  Island,  hull  loss,  veered  off  runway,  no 

fatalities,  severe  fire. 


8  707  12/20/80 


Aerotal,  Bogota,  hull  loss,  no  fatalities,  touchdown  short,  severe 
fire. 


APPENDIX  C 


This  form  appearing  on  the  foL^wing  pages  was  used  for  the  data  search  of  the  accidents. 
It  is  present*  d  here  as  a  convenience  to  the  reader. 


ACCIDENT  FILE  NO. 


accident  identification 


DATE 

TOTAL  ONBOARD 

A/C  MODEL 

CREM  (4N0N-REV.) 

AIR  CARRIER 

PASSENGE..S 

LOCATION 

TOTAL  FATALITIES 

1 

TIME  (LOCAL) 

TOTAL  SERIOUS  INJURIES 

FLIGHT  PHASE 

IMPACT  SURVIVABLE  YES 

NO 

DAMAGE,  (HULL,  MAJOR) 


TYPE  OF  ACCIDENT 

TERMINATE  IN  WATER 

DESCRIPTION  OF  ACCIDENT 

_  IN-FLIGHT  FIRE 

_  GROUND  IMPACT  - 

_  GROUND  IMPACT  - 

_  GROUND  IMPACT  - 

_  GROUND  IMPACT  - 

NO  FIRE 

MINOR  FIRE 

MOD.  FIRE 

SEVERE  FIRE 

STRUCTURE  RELATED  TYPE 

NO  STRUCTURE  DESCRIPTION 

COCKPIT  damage 

FUSELAGE  BREAK 

WING  .JP 

BELTS/SEAT  SEP 

GEAR  SEP 

TANK  RUPT 

ENGINE/PYLON  SEP 

FLOORS 

DOORS 

DEBRIS 

FUEL  LINES 

WEATHER  TEMP.  WIND 

DESCRIPTION  AT  IMPACT  LOCATION 

' 

TERRAIN  AT  IMPACT  UXATION 

A/C  ATTITUDE  AT  IMPACT 

PIUJT  ACTIONS 


FLIGHT  DATA  RECORDER  ANALYSIS  _ FLAPS  _ 

AVOIDANCE  ACTIONS 

ROTATION  _  SPOILERS  _ ^ _  FLAPS  _ 

BRAKES  _  REVERSE  THRUST  _  POWER  _ _ 

STEERING  _ ; _  OTHER  CONTROL  APPLICATIONS  _ 

A/C  CONFIGURATION  AT  IMPACT 

GEAR  L  MLG  _ ;  R  MLG  _ _  HOSE  GR  _ 

EST.  FUEL  QT.  GAL.  NO.  1  _  NO.  2  _  CW _  NO.  3  _  NO.  4  _ 

AT  IMPACT  -  A/C  SPEED  _  RATE  OF  DESCENT _ 

IMPACT  “G*  LOADS  -  FWD  _  DOWN  _  SIDE  _ 

WING  DAMAG/FUEL  SPILL 

HOW  AND  WHERE  SPILLED  _ 

WING  BOX  ROPT  BY  GEAR  SEP  _ _  OR  ENGINE  STRUT  SEP  _ ' 

QUANTITY  SPILLED  MAJOR  _  MOO  _  MINOR  ______________ 

SEPARATION  AT  W.S.  -  LEFT  '  _  RIGHT  _ 

X-ROPT  X-EXPLO.  TANK  RUPTURE  NO.  1  _  NO.  2  _  CW  _  NO.  3  _ _  NO.  4 

ENGINE  SEPARATION  NO.  1  _  NO.  2  _  NO.  3  _  NO.  4  _ 

ENG.  STRUT.  SEP.  NO.  1  _  NO.  2  _  NO.  3  _  NO.  4  _ 

LOG.  GEAR  SEP.  OR  COLLAPSE  L  MLG  _  B  MLG  _____  R  MLG  _____  N.G.  _ 

WING  FUEL  FIRE  >  WHICH  TANK(S) 

-  WHICH  ENGINES  OR  STRUTS ’ 

SEVERITY  EXTREME  .  MODERATE  ,  MINOR  ' 

SOURCE  OF  IGNITION 

BOW  LONG  (TIME  IN  SECONDS)  AFTER  A/C  MOVEMENT  STOPPED  UNTIL  FIRE  BECAME  SEVERE 


FUSELAGE  DAMAGE 


CABIN  FV»R  DAMAGE  _ _ 

FUSELAGE  BPEAK  LOCATIONS  (PODlf  STA.  S)  _ 

TOTAL  SEPARATION  _ _  PARTIAL  SEP.  _ 

COCKPIT  DAMAGE  EXTREME  _  MODERATE  _ MINOR  _ 

PASS.  SEAT  SEP.  MOST  _  SOME  _  FEN _ '  NONE 

GALLEY  SEPARATION  (WHICH)  _ _ 

OVERHEAD  STORAGE  COLLAPSE  _ _ _ 

BODY  INTERIOR  PANEL  COLLAPSE  _ 

WHAT  DEBRIS  HINDERED  PASS  EVAC.  _ _ _ 


FUSELAGE  DOOR/HATCHES  WERE  -  JAMMED  _ 

-  BLOCKED  _ 

EXTERNAL  FUEL  FIRE  ENTERED  PASS.  AREA  (HOW  OR  WHERE) 


LWR  (BOTTOM)  FUSELAGE  TORN/RUPT.  -  EXTREME  _  MOD.  ______  MINOR 

FUSELAGE  FIRE  (NON-FUEL)  -  INITIAL  LOG.  _ _ 

-  IGNITION  SOURCE  _ _ 

SIZE/EXTENT  OF  BORN  AREA  _ _ _ 


VENTILATION  PROBLEM  -  SMOKE/FUMES 

COCKPIT  -  SEVERE  MOD. 

MINOS 

NONE 

UNIWOWN 

PASS  CABIN  -  SEVERE  MOD. 

MINOR 

NONE 

UNKNOWN 

AFT  FUSELAGE  - 

TAIL  MOUNTED  ENGINE  A/C 

ENGINE  BURST  01 

iSRIS  DAMAGED  FUSELAGE  (LOCATIONS) 

-  FIRE  DEVELOPED  IN  FUSELAGE 

ENCINE/STROT  Fl 

RE  BURNED  INTO  FUSELAGE 

FIRE/SMOKE  ENTI 

FIRE  (OTHER  THi 

RED  PASS.  COMPT.  SEVERE  NOD.  MINOR 

a  ENGINE  RELATED) 

156 


CREW  t  PASSENGER  EVACUATION 


TIME  TO  EVAC  SURVIVORS  (SECONDS)  _ 

NUMBER  OF  PASS.  THAT  EVACUATED  THRO  ENTRANCE  DOORS  _ 

EMERG.  HATCHES 

BOOT  BREAKS  _ 

UNKNOWN  _ 

SLIDES/CHOTES  -  NOT  USED  _  USED  SUCCESSFULLY 

S(ME  MALFUNCTED  (NO.)  _  EFFECTED  EVAC.  _ 

SOME  RIPPED  OR  BURNED  (NO.)  _  EFFECTED  EVAC. 

SURVIVORS  THROWN  OUT  THRO  BODY  BREAKS  _ 

TOTAL  NO.  FATALITIES  AT  SCENE  _ 

NUMBER 

HUMBER  FOUND  IN  SEATS  _ 

IN  AISLE  (ON  FLOOR)  _ 

OUTSIDE  A/C 
UNKNOWN 


PASS/CREW 

PERCENT 

MOST 

FEW 

SOME,  BTC. 


CAUSE  OF  DEATH  -  TRAUMA  - 

INSIDE  A/C 

PASS/CREW  NUMBER 

OUTSIDE  A/C 

PERCENT 

•FIRE/SMOKE  - 

INSIDE  A/C 

MOST 

OUTSIDE  A/C 

FEW 

-UNKNOWN 

SOME.  ETC. 

PANIC  MAY  HAVE  DID 

OCCUR 

OR  UNKNOWN 

FATALITIES  MAY  HAVE 

DIO 

RESULT  FROM  THIS 

EMERG.  LIGHTING  USED 

NOT  USED 

UNKNOWN 

AIRCRAFT  TERMINATED  IN  WATER 


TIME  (MIN.)  A/C  REMAINED  AFLOAT  _  ALL  OR  PART 

A/C  RESTS  ON  BOTTOM  (PARTIALLY  OUT  OF  WATER)  _ 

SLIDES/RAFTS  USED  ,  NOT  USED  _  UNKNOWN  _ _ 

LIFE  VESTS  AVAILABLE  _  USED  _  NOT  USED  _ 

FUSELAGE  REMAINED  INTACT  _  BROKEN/SEP  _  RUPTURED  _ 

FATALITIES  DUE  TO  TRAUMA  _ 

DROWNING  (INSIDE  A/C)  _ 

(OUTSIDE  A/C)  _ 

UNKNOWN  _ 


UNKNOWN  _ 

UNKNOWN  _ _ 

NUMBER 

PERCENT 

MOST 

SOME 

FEW,  BTC. 


JUDGEMENT  ITEMS  (SEVERITY  INCLUDES  BOTH  A/C  DAMAGE  t  FATALITIES) 
GEAR  SEPARATION/COLLAPSE  CONTRIBUTED  TO  SEVERITY  OP  THIS  ACCIDENT 

DID  _ _ 

MAY  HAVE  _ _ 

DID  NOT  ' 

ENGINE/PYLON  SEPARATION  CONTRIBUTED  TO  THE  SEVERITY  OF  THIS  ACCIDENT 

DID  _ 

MAY  HAVE  _ 

DID  NOT  _ 

FUEL  TANK  REPTURE  CONTRIBUTED  TO  THE  SEVERITY  OP  THIS  ACCIDENT 

DID  .  _ 

MAY  HAVE  _ 

DID  NOT  ,  _______ 

FLOORS/DOORS/DEBRIS  CONTRIBUTED  _ '  _ 

DIO  _ _ 

MAY  HAVE  '  . 

DID  NOT  ' 

BELTS/SEATS  . 

DIO  '  . 

MAY  HAVE  «»-«««««. 

DID  NOT  • 

FUSELAGE  BREAK/SEPARATION  CONTRIBUTED  TO  SEVERITY  OF  THIS  ACCIDENT 


DIO 

MAY  HAVE 
DIO  NOT 
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Review/Appraisal  of  the  U.S.  Army’s, 
Aircraft  Crash  Survival  Design  Guide 
USARTL-TR.79-22A,B,C,D,E 
for  Other  Applications 


D.L.  Parks 
D.W.Twigg 


ABSTRACT 

The  newest  update  to  the  U.S.  Amy’s  Aircraft  Crash  Survival  Design  Guide  for  Amy  aircraft  was 
reviewed  for  ideas  that  might  apply  in  other  systems  and  therefore  bear  further  research. 
Philosophically,  many  features  were  compatible  with  the  philosophy  and  practices  for  commercial 
systems.  However,  the  Guide  does  not  make  allowances  for  widely  varying  differences  in  crash 
characteristics  and  inherent  energy  absorption  features  from  one  system  to  another,  e.g.,  from 
small  rigid  body  aircraft  with  minimal  subfloor  volume  for  energy  absorption  to  large  flexible  body 
aircraft  with  large  subfloor  volume  for  energy  absorption.  Additionally,  the  orientation  is  for 
survival  under  any  circumstances  that  Amy  operatioiu  might  encounter— a  far  more  hazardous 
set  of  circumstances  than  will  occur  for  commercial  vehicle^.  Accordingly,  this  appraisal  does  not 
get  into  all  criteria  in  the  Guide  but  instead  provides  a  review  of  those  features  that  may  bear 
further  consideration  in  research  and  development  studies. 
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1.0  INTRODUCTION 


The  purpose  of  the  present  study  is  to  review  and  critique  the  new  U.S.  Army’s  Crash  Survival  Design 
Guide  (ref.  D-1)  for  research  ideas  that  might  ultimately  benefit  commercial  aircraft  safety  and  thus 
bear  further  research  attention  to  resolve  potential  value  in  commercial  aircraft  applications.  It  is  also 
intended  to  distinguish  those  elements  which  may  and  which  may  not  readily  transfer  from  light  and 
small  rigid  body  aircraft  to  large  flexible  body  transports. 

The  authors  of  the  new  Guide  accepted  and  are  to  be  commended  for  responding  to  a  major 
challenge.  They  have  attempted  to  refine  earlier  editions  of  the  Guide  and  to  indicate  more  room  for 
trade-offs  than  earlier  issuai  implied.  For  example,  the  third  edition  of  the  Army  Crash  Survival 
Design  Guide  more  carefully  constrains  the  guideline  recommendations  to  the  small  rigid  body 
airplanes  used  by  the  U.S.  Amy  than  earlier  editions,  i.e.,  the  light  fixed  wing  aircraft  and 
helicopters.  Additionally,  the  authors  indicate  many  of  the  trade-offs  and  realistic  constraints  that 
must  be  considered  relative  to  the  guidelines,  introducing  the  possibility  of  waivers  by  the  Army, 
baaed  on  trade-offs  of  objectives  versus  realistic  design  constraints.  The  indicated  trade-offs 
UluStrate  potential  problems  in  generalizing  within  vehicles,  and  by  extension  problems  in  attempts  to 
generalize  guidelines  developed  for  the  Army  to  large  flexible  body  commercial  airplanes. 

Since  the  1967  and  1971  versions  of  the  Guide,  many  aieas  of  progrras  in  development,  in  test  and 
evaluation,  and  in  operational  experience  have  added  to  the  fund  of  knowledge.  However,  guidelines 
or  criteria  spelled  out  in  the  earlier  Guide  were  in  fact  sometimes  unduly  restrictive,  sometimes 
difficult-to-imposaible  to  achieve,  and  conaervativ'.  even  for  the  Army  objectives.  In  this  latest 
version  of  the  Guide,  these  constraints  are  more  apparent,  more  need  for  tradeoffs  from  the 
‘‘criterion’'  conditions  are  recognized,  and  distinctions  between  military  and  commercial 
environments  are  more  obvious.  However,  and  perhaps  partially  due  to  the  greater  autonomy  the 
Army  has  as  both  purchaser  and  user,  the  new  Guide  does  not  yet  really  address  minimum 
requirements  that  must  be  met;  the  orientation  remains  one  of  setting  goals  as  trade-off  positions. 

The  new  Guide  is  in  five  volumes.  In  this  appendix,  information  is  abstracted,  collated  and 
synthesized  across  the  flve  volumes  to  integrate  the  information  into  one  single  abstract  summary, 
lliis  summary  is  a  synthesis  and  critique  of  the  U.S.  Army’s  Aircraft  Crash  Survival  Design  Guide 
in  that  it  is  in  the  main  constrained  to  research  possibilities  for  other  systems.  Accordingly,  it 
includes  information  that  may  be  relevant  for  commercial  aircraft  research  efforts,  and  includes 
questions  regarding  the  Army  Guide  position.  Since  there  was  signiHcant  overlap  and  some 
considerable  redundancy  between  volumes,  a  major  element  in  the  present  effort  was  to  abstract 
and  correlate  related  information  from  all  volumes.  Information  herein  follows  the  same  general 
format  Volume  titles  and  contents  are  as  follows: 

Volume  I  —  Design  Criteria  and  Checklists  ,  _ 

Pertinent  criteria  extracted  from  Volumes  11  through  V.  Provides  for  updating  earlier  related 
military  standards  (ref.  Drl). 

Volume  n  —  Aircraft  Crash  Environment  and  Human  Tolerance 

Craah  environment,  human  tolerance  to  impact,  military  anthropometric  data,  occupant 
environment,  test  dummies,  accident  information  retrievaL 

Volume  in  —  Aircraft  Structural  Crashworthiness 

Crash  load  estimation,  structural  response,  fuselage  and  landing  gear  requirements,  rotor 
requirements,  ancillary  equipment,  cargo,  restraints,  structural  modeling. 


Volume  rV  —  Aircraft  Seats,  Hestraints,  Litters,  and  Padding 

Operational  and  crash  environment,  energy  absorption,  seat  design,  litter  requirements, 
restraint  system  design,  occupant/restraint  aystemlseat  modeling,  delethalization  of  cockpit 
and  cabin  interiors. 

Volume  V  —  Aircraft  Postcrash  Survival 

Postcrash  fire,  ditching,  emergency  escape,  crash  locator  beccons,  retrieval  of  accident 
information. 

General  types  of  subjects  covered  include: 

1.  Crashworthiness  of  Aircraft  Structiue— The  ability  of  the  aircraft  structure  to  maintain 
liNing  space  for  occupants  throughout  a  crash. 

2.  Tiedown  Strength— The  strength  of  the  linkage  preventing  occupant,  cargo,  or  equipment 
from  becoming  missiles  during  a  crash  sequence. 

3.  Occupant  Acceleration  Environment— The  intensity  and  duration  of  accelerations 
experienced  by  occupants  fwith  tiedown  assumed  intact)  during,  a  crash. 

4.  Occupant  Environment  Hazards— Barriers,  projections,  and  loose  equipment  in  the 
immediate  vicinity  of  the  occupant  that  may  cause  ccntact  injuries. 

5.  Postcraah  Hazards— The  threat  to  occupant  survival  posed  by  fire,  drowning,  exposure,  etc., 
following  the  impact  sequence. 

To  date  three  editions  of  the  Guide  have  been  released,  the  first  in  1967,  an  update  in  1971,  and  a 
total  revision  in  1979. 

BACKGROUND  DISCUSSION 

As  summarized  in  the  new  Aircraft  Crash  Survival  Design  Guide,  the  U.S.  Army  Transportation 
Research  Command  (now  the  Applied  Technology  Laboratory,  Research  and  Technology 
Laboratories  of  the  U.S.  Army  Aviation  Research  and  Development  Command  (AVRADCOM) 
initiated  a  long-range  program  in  the  early  19608,  with  the  objective  to  study  all  aspects  of  aircraft 
safety  and  survivability.  From  this  program,  it  was  intended  to  determine  improvements  in  crash 
survival  that  could  be  made  if  co^deration  were  given  in  the  initial  aircraft  design  to  general 
survivability  factors;  figure  D-l.l  expands  on  aspects  of  Crashworthiness”  as  defined  by  the 
newest  version  of  the  Guide. 

In  order  to  determine  which  criteria  and  guidelines  might  be  appropriate  for  commercial  aircraft 
for  present  purposes,  it  was  necessary  to  determine  the  purpose  of  individual  guidelines  and 
criteria.  The  reason  is  that  criteria  and  guidelines  are  not  usually  directly  transferable.  For 
example,  design  criteria  levels  in  the  Guide  are  not  based  oh  theory;  rather  they  are  obtained  by 
estimating  the  crash  loads  which  occurred  in  past  crashes  of  light,  rigid  body  Amy  aircraft.  In 
turn,  a  number  of  related  assumptions  were  involved.  Large,  flexible  body  commercial  aircraft 
with  a  large  cargo  hold  in  the  lower  fuselage  are  clearly  different  in  design  features  that  will  affect 
crash  loads  and  probable  dynamic  responses  in  direct  contrast  to  those  expected  for  the  smaller 
and  lighter  rigid  body  Army  aircraft  Accordingly,  the  conditions  upon  which  criteria  are  based 
must  differ. 
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Figure  l>1.1  -  Crashworthiness  Procedures  for  Structural  Designs  and  Criteria  for 
Preliminary  Design  Process 


The  new  Aircraft  Army  Crash  Survival  Design  Guide  gives  three  distinctly  different  descriptions  of  the 
purpose  of  crashworthy  designs,  but  all  with  the  same  criterion  levels:  (1)  to  eliminate  urmecessary 
injuries  and  fatalities  in  relatively  mild  impacts  (COMMENT:  ‘^lnnecessary*  is  not  derined),  (2)  to 
contain  occupant  deceleration  levels  within  human  tolerance  in  severe  crash  environments,  or  (3) 
(by  numerous  implications)  to  survive  any  crash  “combat  ready”.  All  three  criteria  in  the  Guide  refer 
to  the  same  deceleration  levels.  In  contrast.  Federal  Air  Regulation  Part  25  (FAR  25)  states  that 
design  for  commercial  aircraft  is  “to  give  each  occupant  every  reasonable  chance  of  escaping 
serious  injury  in  a  minor  crash  landing”  when  using  restraints  and  other  safety  provisions,  with 
landing  gear  up,  and  with  lower  deceleration  loads  and  uses  a  conrespondingly  lower  criterion  level. 

On  the  surface,  the  first  two  goals  of  crashworthy  design  stated  in  the  Guide  (to  eliminate 
unnecessary  injuries  and  fatalities  in  a  minor  crash  and  to  assure  survival  in  a  severe  crash— still  a 
somewhat  speculative  outcome)  may  seem  consistant  In  actuality,  the  two  goals  Are  frequently  in 
opposition.  A  design  feature  designed  to  operate  at  low  crash  loads  to  prevent  injury  is  often 
inefficient  at  high  crash  loads,  and  presence  of  the  feature  may  in  fact  degrrde  the  overall 
performance  at  the  high  loads.  11118  is  an  extension  of  the  comfort  versus  safety  problem— a 
system  designed  to  be  comfortable  at  low  crash  loads  may  very  likely  be  leas  “safe”  at  high  crash 
loads.  An  example  is  the  5  mph  barrier  crash  requirement  in  the  automotive  industry.  Bumper 
systems  designed  to  provide  100%  protection  (to  the  car)  at  5  mph  may  provide  less  protection  at 
bi^er  speeds  than  might  otherwise  be  the  case.  Unfortunately,  the  Guide  appears  to  treat  these 
criteria  as  though  they  were  interchangeable. 

“Survivable”  commercial  aircraft  accidents  are  generally  near  airports  where  external  assistance 
for  evacuation  and  quick  medical  attention  are  available.  Thus,  even  the  injured  have  a  reasonable 
chance  for  survival.  This  is  in  stark  contrast  with  military  crashes,  which  may  occur  in  a  combat 
zone  without  proqiect  of  external  aid  so  that  the  need  for  self  suftidency  is  more  pronounced. 
Goals  to  totally  avoid  injury  ate  vastly  different  from  goals  to  reduce  injury  potential  or  otherwise 
improve  safety  in  even  the  feasibility  of  implementing  practical  improvements. 

As  its  own  regulator  and  consumer,  the  Army  can  set  and  adjust  goals  and  thus  need  not 
distinguish  between  crashworthiness  goals,  guidelines,  and  criteria.  As  pointed  out  Volume  11, 
the  Army  may  itself  opt  to  retain,  adjust,  or  waive  any  of  same  when  compliance  is  demonstrated 
to  involve  an  unacceptable  compromise  in  system  objectives,  performance,  or  costs.. These 
distinctions  are,  accordingly,  not  rigidly  observed  in  the  new  Guide.  Neither  the  lack  of  distinction 
in  goals,  guidelines  and  criteria  nor  waivers  are  practical  in  the  dvilian  environmep*.  Rules  are 
laws  that  must  be  met  without  exception  and  cannot  be  traded  off  when  a  given  requirement  is 
demonstrated  to  be  impractical,  or  shown  to  effect  a  serious  compromise  some  other  aspect  of 
sy8i<!m  operation. 

It  should  be  emphasized  that  the  Army’s  design  guide  was  written  expressly  for  the  Army’s  light 
aircraft  (helicopter  and  single  engine  propeller),  which  must  indude,  by  definition,  operations 
involving  a  variety  of  “normal”,  training,  remote  austere,  and  combat  siti  itions.  The  aircraft 
considered  for  the  updated  version  of  the  guide  were  constrained  to  a  vehide  mission  gross  weight 
of  12,500  pounds  or  less. 
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2.0  DEFINITIONS  OF  TERMS 

The  Guide  defines  specialized  terms  related  to  crashworthiness  at  the  beginnings  of  each  volume. 
Several  of  these  defmitions  are  paraphrased  herein  for  the  convenience  of  the  reader. 

GENERAL  TERMS 

Abrupt  Decelerations  —  Describes  the  short  duration  shock  accelerations  primarily  associated 
with  crash  impacts,  ejection  seat  shocks,  capsule  impacts,  etc.  One  second  is  generally  accepted  as 
the  dividing  point  between  abrupt  and  prolonged  accelerations.  Within  the  extremely  short 
duration  range  of  abrupt  accelerations  (0.2  sec  and  below),  thd  effects  on  the  human  body  are 
limited  to  mechanical  overloading  (skeletal  and' soft  tissue  stresses),  there  being  insufndent  time 
for  functional  disturbances  due  to  fluid  shifts. 

COMMENT;  Within  the  Guide,  high  loads  used  to  define  criteria  are  less  than  one  second  duration 
and  most  typically  less  than  .050  sec.  The  authors  state  that  this  regim  is  where  effects  on  the 
human  body  are  limited  to  mechanical  overload  of  structure  and  tissue  since  time  is  too  short  for  fluid 
shifts.  In  large  commercial  aircraft,  pulses  are  generally  accepted  as  ranging  up  to  0.2  to 
0.25  seconds. 

Human  Tolerance  —  A  selected  array  of  parameters  that  describe  a  condition  of  human  body 
decelerative  loading,  i.e  ,  a  crash  pulse  for  which  it  is  believed  there  is  a  reasonable  probability  of 
survival  without  major  injury  (this  is  also  termed  “whole-body  tolerance”).  “As  used  in  this  volume 
(01),  designing  for  the  limits  of  human  tolerance  refers  to  providing  design  features  that  will 
maintain  these  conditions  at  or  below  their  tolerable  levels  to  enable  the  occupant  to  survive  the 
given  crash  environment.” 

Human  tolerance  to  the  crash  environment  is  a  function  of  many  variables,  including  unique 
characteristics  of  each  person  as  well  as  the  impinging  loads.  Loads  are  transmitted  from  the  seat, 
the  restraint  system  and  the  surrounding  environment.  Tolerability  depends  on  load  direction, 
body  orientation,  and  the  critical  nature  of  the  load  relative  to  a  body  member.  For  example, 
conditions  wherein  the  belt  rides  up  off  the  iliac  crests  of  the  pelvis  may  contnbute  excessive 
abdominal  loads,  or  skull  fracture  may  result  from  head  contact,  or  the  type  of  loads  applied  to  the 
spine  may  create  injury. 

COMMENT:  Definition  implies  that  it  is  possible  and  practical  to  design  to  human  tolerance  limits 
and  assure  survival  without  exception;  in  actuality,  other  text  clearly  indicates  this  to  be 
considered  a  goal  which  is  not  necessarily  achievable.  Resulting  implications  are  misleading  to  the 
newcomer  to  the  field. 

The  Term  “G”  —  Refers  to  the  ratio  of  acceleration  encountered  to  that  from  gravitationalattracuon 
on  a  given  body  at  sea  leveL  (i.e.,  relative  to  32.2  ft/sec^).  In  use  herein,  “G”,  increments  are 
referenced  in  multiples  of  same,  so  5  G  is  5  times  the  normal  forces  on  the  body. 

Survivable  Accident  —  An  accident  in  which  the  forces  to  the  occupantfs)  are  within  tolerance 
limits  and  the  surrounding  structure  remains  substantially  intact  to  provide  a  livable  volume 
throughout  the  crash  sequence. 

COMMENT:  Definition  of  survivability  varies  between  volumes  of  the  Guide.  One  is  to  “eliminate 
unnecessary  injuries  and  fatalities  in  relatively  mild  impacts”  (Volume  D.  Another  is  to  “minimize 
occupant  accelerations  to  survivable  levels  in  a  severe  crash  environment”  (Volume  II). 


Survival  £!nvelope  —  The  range  of  impact  conditions  wherein  the  occupiable  area  of  the  aircraft 
remains  substantially  intact,  (i.e.,  wherein  forces  transmitted  to  occupants  do  not  exceed  the  limits 
of  human  tolerance  when  state-of-the-art  restraint  systems  are  used).  As  a  precaution,  accident 
investigation  will  not  necessarily  show  that  survivable  conditions  may  not  have  existed  in  an 
accident  that  may  appear  from  postcrash  inspection  to  have  been  survivable;  elastic  recovery  from 
crash  induced  deformation  can  mask  actual  crash  conditions. 

Submarining  —  The  rotation  of  the  hips  under  and  through  the  lap-belt  as  the  belt  slips  up  and  off 
the  iliac  crests  of  the  pelvis  caused  by  forward  inertial  loads  on  the  legs.  ‘T>ap-belt  slippage”  can  be 
a  direct  result  of  the  upward  loading  of  the  shoulder  harness  straps  at  the  center  of  the  lap-belt, 
(figure  D-2.1,  from  ref.  0-2). 

Dynamic  Overshoot  —  The  amplification  of  decelerative  force  on  cargo  or  personnel  above  the 
impact  deceleration  force  resulting  from  dynamic  response  of  the  system.  For  example,  a  loose 
system  can  dramatically  increase  peak  loads. 

SEATING  GEOMETRY 

See  figure  0-2.2,  from  MILrSTD-1333,  Mn,STD-850,  and  U.S.  Army’s  Aircraft  Crash  Survival 
Design  Guide  (ref.  0-3,  0-4,  and  0-1). 

Design  Eye  Poeitimi  —  A  reference  datum  point  baaed  on  the  eye  location  that  permits  the  speciHed 
viaioo  envelope  required  by  MIL-STD-850,  allows  for  slouch,  and  is  the  datum  point  from  wUch  the 
aircraft  station  geometry  is  constructed.  The  design  eye  position  is  a  fixed  point  in  the  crew  station, 
and  remains  constant  for  pilots  of  aU  statures  via  appropriate  seat  adjustment 

Horizontal  Vision  Line  —  A  reference  line  passing  through  the  design  eye  position  parallel  to  the 
true  horizontal  and  normal  cruise  position. 

Back  Tangent  Line  —  A  straight  line  in  the  midplane  of  the  seat  passing  tangent  to  the  curvatures 
of  a  seat  occupant's  back  when  leaning  back  and  naturally  compressing  the  iMck  cushion.  The  seat 
back  tangent  line  is  positioned  13  in.  behind  the  de^gn  eye  position  as  measured  along  a 
perpendicular  to  the  seat  back  tangent  line. 

Buttock  Reference  I-inn  —  A  line  in  the  midplane  of  the  seat  parallel  to  the  horizontal  vision  line 
and  tangent  to  the  lowermost  natural  protrusion  of  a  selected  size  of  occupant  sitting  on  the  seat 
cushion. 

Seat  Reference  Point  (SRP)  —  The  intersection  of  the  back  tangent  line  and  the  buttock  reference 
line.  The  seat  geometry  and  location  are  based  on  the  SRP.  ' 

Buttock  Reference  Point  —  A  point  6.75  in.  forward  of  the  seat  reference  point  on  the  buttock 
reference  line.  This  point  defines  the  approximate  bottom  of  an  ischial  tuberosity,  thus 
representing  the  lowest  point  on  the  pelvic  structure  and  the  point  that  will  support  the  moat  load 
during  downward  vertical  loading. 

Heel  Rest  Line  —  The  reference  line  parallel  to  the  horizontal  vision  line  passing  under  the  tangent 
to  the  lowest  point  on  the  heel  in  the  normal  operational  position,  not  necessarily  coincidental  with 
the  floor  line. 


SELECTED  EXAMPLES 


Figure  D-2. 1  -  Dynamic  Responses  to  Forward  Accelerations 


STRUCTURAL  TERMS 


Airframe  Structural  Crashworthiness  —  The  ability  of  an  airframe  structure  to  maintain  a 
protective  shell  around  occupants  during  a  crash  and  to  minimize  magnitudes  of  accelerations 
applied  to  the  occupiable  portion  of  the  aircraft  during  crash  impacts. 

Structural  Integrity  —  The  ability  of  a  structure  to  sustain  crash  loads  without  collapse,  failure,  or 
deformation  c  f  sufficient  magnitude  to  cause  injury  to  personnel,  or  prevent  the  structure  from 
performing  as  intended. 

Static  Strength  —  The  maximum  static  load  that  can  be  sustained  by  a  structure,  often  expressed 
as  a  load  factor  in  terms  of  G. 

Strain  —  The  ratio  of  change  in  length  to  the  original  length  of  a  loaded  component. 

Collapse  —  Plastic  deformation  of  structure  to  the  point  of  loss  of  useful  load  carrying  ability. 
Although  normally  considered  detrimental,  in  certain  cases  collapse  can  progress  in  a  controlled 
fashion,  maintaining  structural  integrity. 

Limit  Load  —  In  a  structure,  limit  load  n  '-.-s  to  the  load  the  structure  will  carry  before  yielding. 
Similarly,  in  an  energy-absorbing  device  it  represents  the  load  at  which  the  device  deforms  in 
performing  its  function. 

Load  Limiter,  Load-Limiting  Device,  or  Energy  Absorber  — ■  These  are  interchangeable  names  of 
devices  used  to  limit  the  load  in  a  structurtp  to  a  preselected  value.  These  devices  absorb  energy  by 
providing  a  resistive  force  applied  over  a  determation  distance  without  signiHcant  elastic  rebound. 

Botte  ning  —  The  exhaustion  of  available  stroking  distance  accompanied  by  an  increase  in  force, 
e.g.,  a  seat  stroking  in  the  vertical  direction  exhausts  the  available  distance  and  impacts  the  floor. 


3.0  AIRCRAFT  CRASH  INFORMATION 


Authors  of  the  present  edition  of  the  U.S.  Army's  Aircraft  Crush  Survival  Desixn  Guide  re<x)i(nize  and 
accept  that  tradeoffs  must  be  accomplished  relative  to  earlier  staUnl  criteria.  New  generation  Army 
aircraft  are  being  procurred  with  stringent  crashworthiness  requirements,  based  on  “9r>th  percentile 
survivable  accidents"  as  defined  in  an  earlier  study  (ref.  The  new  Guide  emphasizes  that 
component  changes  recommended  by  earlier  editions,  or  those  that  might  be  implemented  in 
attempts  to  resolve  more  specific  problems,  may  not  meaningfully  improve  crashworthiness  in  some 
fixed  aystem  designs.  Accordingly,  the  authors  point  out  that  retrofit  improvements  are  limited  and 
may  result  in  prohibitive  weight  and  cost  penalties  if  requirements  are  too  severe  or  too  rigidly 
applied,  although  some  retrofit  packages  are  feasi'ole.  Individual  technological  appraisals  become 
necessary. 

Army  aircraft  for  which  this  present  Army  study  was  intended  include  rotary  wing  and  fixed  wing 
aircraft  under  12,5(X)  pounds,  the  small  rigid  body  aircraft  used  in  the  Army  mission.  These  aircraft 
are  relatively  unyielding  during  crash  impact  unless  specific  design  provisions  are  incorporated. 
Anything  exceeding  the  equivalent  of  a  free  fall  of  100  ft  in  any  of  these  aircraft  is  considered  to  be 
nonsurvivable.  Kesulting  aircraft-related  criteria  are  based  on  design  factors  that  might  be  applied  to 
such  aircraft  in  order  to  reduce  the  degree  to  which  human  tolerance  criteria  might  be  approached, 
and  thus  improve  survivability. 

Human  tolerance  in  the  crash  environment  is  the  basic  criterion  for  crashworthiness,  and  is  related 
to  acceleration  magnitude,  duration  and  rate  of  change.  Crasii  envir»nment  data  discussed  in  the 
Guide  and  herein  relates  information  on  factors  that  can  be  used  to  enhance  this  environment.  Other 
factors  influencing  survival  are: 

1.  Structural  collapse,  from  impact  or  supporting  large  mass  during  impact 

2.  Structural  elastic  deformation 

3.  Structural  penetration 

4.  Structural  strength  protecting  egress  operation 

5.  Structural  strength  of  landing  gear  and  seat  restraint  support  system 

COMMENT:  Three  different  survivability  goals  are  indicated  or  inferred  in  the  new  Guide.  One  is  to 
eliminate  'Wiecesaary*  injuries  and  fatalities  in  relatively  "mild”  impacts.  A  second  is  to  design  "for 
the  linuts  of  human  tolerance’... to  maintain  conditions  at  or  below  their  tolerable  levela  to  enable  the 
occupant  to  survive  the  given  crash  environment.  A  third  is  implied,  to  survive  any  crash  and  be 
"combat  ready." 

BACKGROUND  DISCUSSION 

The  Army  approach  to  improving  survivability  has  been  in  two  stages,  first  by  improving  the 
"crashworthiness”  of  existing  aircraft  as  practicable,  then  by  influencing  design  of  new  aircraft 
through  assuring  consideration  of  improved  capabilities.  Army  objectives  for  their  “crashworthy” 
aircraft  relate  to  minimizing  injuries  and  fatalities  and  controlling  structural  damage  so  that  "a 
sui  livable  environment  is  more  likely  to  be  maintained."  Army  criteria  were  related  to  combat  goals, 
in  order  to  produce  a  positive,  morale  factor  and  improve  combat  effectiveness.  The  army 
accordingly  gives  great  emphasis  and  apparently  considerable  funding  to  maximize  protection 
afforded  to  occupants  by  each  subsystem  without  really  addressing  what  minimiun  requirements 
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might  be.  In  providing  maximum  protection  as  the  authors  of  the  updated  Army  Guide  see  it,  a  vertical 
crash  impact  is  a  series  of  energy  absorbing  strokes  that  occur  as  different  ductile  components 
yield.  They  use  landing  gear  stroking  to  absorb  a  signiHcant  amount  of  energy;  the  fuselage 
contributes  to  absorption  and  provides  a  protective  shell  for  occiq)ants;  the  floor,  seat,  and  restraint 
systems  contain  occupants  within  the  shell  and  provide  additional  energy  absorption  to  reduce 
occupant  decelerative  loading.  Additionally,  weapon  sights,  cyclic  controls,  glareshields,  instrument 
panels,  armor,  and  stmeture  are  to  be  delethalized. 

COMMENT;  The  authors  of  the  new  Army  Guide  do  not  follow  the  more  common  engineering 
practice  of  allowing  a  cumulative  system  credit  based  on  a  summation  of  capabilities  for  components 
to  some  minimum  requirement  goal  for  energy  absorption.  Instead,  they  emphasize  maximum 
protection  possible  from  each  subsystem,  taking  the  position  that  it  is  not  possible  to  simply  specify 
human  tolerance  and  vehicle  crash  conditions.  For  example,  they  take  the  pdaition  that  designers 
must  also  consider  probable  crash  conditions  wherein  all  subqrstems  cannot  perform  their  desired 
functions;  e.g.,  no  landing  gear  absorption  of  impact  energy,  since  helicopters  may  not  contact  the 
ground  via  the  landing  gear.  Criterion  levels  that  are  actually  oriented  to  maximum  possible 
performance  are  thus  also  recommended  in  the  Guide  for  each  individual  subsystem,  e.g.,  in  energy 
absorption  requirements  for  seat  and  restraint  systems. 

This  amounts  to  extremely  conservative  engineering  practice,  since  cumulative  capabilities  are 
accepted  standard  practice  and  since  most  design  criteria  are  based  on  specifying  minimum,  not 
maximum,  requirements.  Opinions,  practicality,  and  even  estimates  of  feasibility  will  vary,  creating  a 
difficult-to-impossible  situation.  Secondly,  design  goals  are  not  usually  specitied  or  accepted  as  a 
design  practice.  Additionally,  the  practice  of  generalizing  frmn  the  worst  case  for  one  system  to 
other  aircraft  that  seldom,  if  ever,  encounter  that  case  is  hard  to  justify  (e.g.,  generalizing  vertical 
loading  criteria  from  upside  down  landing  of  a  helicopter,  or  usiiig  helicoptar  based  impact  loads  that 
are  due  to  rotor  thrashing,  to  set  criteria  for  tixed  wing  aircraft  with  their  vastly  different  impact 
circumstances). 

AIRCRAFT  CRASH  ENVIRONMENT 

Statistical  studies  were  conducted  to  determine  impact  conditions  for  rotary  wing  and  light  fixed  wing 
aircraft  of  mission  gross  weight  no  greater  .than  12,500  pounds  during  the  period  1960  through 
1965,  and  1971  through  1976  (Volume  III)  (also  ref.  6).  Cases  selected  had  at  least  one  survivor 
and  one  or  more  of  the  following  factors:  (1)  substantial  structural  damage,  (2)  postcrash  firei  (3) 
personnel  injuries.  Numerous  severe  accidents  were  excluded  from  consideration,  such  as  midair 
collisions  or  free  fall  drops  of  100  ft  or  more  because,  ‘^uch  aeddotts  almost  invariably  resul  t  in 
random,  unpredictable  crash  kinematics  and  nonsurvivable  impact  forces,  and  are  of  little  valu  >  in 
estsiblishing  realistic  crash  survival  envelopes  that  would  be  useful  to  the 
aircraft  designer.” 

COMMENT:  In  view  of  typical  impact  speeds  compared  to  helicopters  and  light  aircraft,  most  k  rge 
commercial  aircraft  accidents  may  fall  in  this  high  load  category. 

Impact  conditions  were  found  to  be  similar  from  rotary  whig  to  light  fixed  wing  STOL  aircraft,  a  nd, 
except  for  lateral  conditions,  were  treated  as  being  the  same.  Impact  velocities  were  "known”  for 
what  appears  to  be  a  somewhat  arbitrarily  selected  sample  of  40  aircraft  out  of 600 accidents  t  hat 
were  reviewed  (with  errors  in  estimated  impact  velocity  "probaUy”  not  exceeding  ±20%),  but  cc  uld 
not  be  established  for  other  aircraft  crashes.  One  ball  the  vdiicles  that  could  be  appraised  w  ere 
estimated  to  experience  a  vertical  velocity  change  of  24  ft/sec  or  less  (equivalent  to  free  fall  of  8  ft. 
11  in.),  and  95%  were  estimated  to  experience  a  vertical  velocity  dtange  of  42  ft/sec  or  ess 
(equivalent  to  free  fall  of  27  ft  5  in.).  Longitudinal  velocity  changes  were  approximately  28  ft/sec  for 
the  50th  percentile  and  50  ft/sec  for  the  95th  percentile  crash. 


Impact  accelerations  were  estimated  by  the  original  accident  investigation  board  and  recalculated  by 
the  survey  team.  Additional  analysis  was  performed  for  cases  that  “appeared  to  be  near  the  upper 
limits  of  survivability.”  The  40  aircraft  used  were  selected  from  an  overall  review  that  covered  563 
rotary  wing  and  92  fixed  wing  aircraft,  of  which  373  were  used  to  establish  impact  conditions. 
Impact  attitudes  were  also  used  from  the  added  collection  of  crash  data  for  108  attack  helicopters 
and  10  cargo  helicopters  for  the  period  1971  to  1976.  The  statistically  most  frequent  impact 
involved  trees.  It  was  found  that  loose  soil  could  be  beneticial,  or  alternatively  could  actually  increase 
decelerations  (e.g.,  if  the  structure  dug  into  the  ground). 

Since  insufficient  lateral  data  were  available,  lateral  velocity  changes  were  inferred  from 
circurastances  of  the  helicopter  and  light  aircraft  accidents  to  be  25  ft/sec,  supplemented  by  recent 
studies  suggesting  30  ft/sec.  Based  on  the  above  the  three-dimensional  resultant  for  velocity 
changes  did  not  appear  to  exceed  50  ft/sec,  although  vector  summing  is  specifically  identified  as 
inappropriate. 

Floor  decelerations  were  estimated  from  the  following  equation;  however,  this  may  well  overestimate 
Gave  if  occurs  early  in  the  pulse  (see  appendix  D-A,  tig.  1). 

^ave 

Overall,  the  authors  concluded  that  95%  of  the  “survivable”  helicopter  and  light  fixed  wing  aircraft 
accidents  involved  average  vertical  accelerations  of  less  than  24  G  (with  “peak”  accelerations  of  48 
G,  assuming  triangular  pulse  shape).  Average  longitudinal  accelerations  were  15  G  and  average 
lateral  accelerations  were  16  G  (most  particularly  during  auto  rotation  into  trees,  fuselage  rotation, 
then  landing  on  the  side).  Actually,  most  accidents  occurred  with  small  yaw  and  roll  angles. 

Accidents  involving  postcrash  fire  were  considered  where  possible,  but  bum  damage  in  many 
accidents  precluded  analysis  of  impact  forces.  Still  others  provided  insufficient  or  inadequate  data 
for  detailed  case  analysis. 

Earlier  impact  criteria  used  by  Army  were  based  on  an  early  decision  to  increase  crash  survivability 
that  appears  to  have  been  somewhat  arbitrary  (Army  Crash  Survival  Design  Guide,  first  and  second 
edition)  to  a  level  baaed  on  a  study  in  the  1960  to  1965  time  period  (Haley,  ref.  D-6)  which  defined 
a  survivable  crash  as  any  crash  with  at  least  one  survivor,  and  setting  objectives  for  Army  aircraft  to 
the  95th  percentile  loads  for  such  conditions.  The  authors  of  the  new  Guide  emphasize  that,  now 
that  serious  attempts  to  meet  the  criteria  have  been  incorporated  to  some  extent  in  a  number  of  Army 
aircraft,  it  would  be  a  mistake  to  continue  using  a  floating  baseline  (i.e.,  the  95th  iiercentile  crash) 
since  it  could  only  lead  to  a  never-ending  increase  in  crashworthiness  at  the  expense  of  aircraft 
performance.  Accordingly,  the  96th  percentile  criteria  is  dropped  in  the  new  Guide  and  the  design 
piilas  derived  in  the  earlier  effort  continues  to  be  recommended  for  Army  use  (figure  D-3.1). 

COMMENT:  The  rationale  for  selecting  only  40  aircraft  for  the  sample  analysis  not  totally  clear. 
There  is  a  reasonable  likelihood  that  many  of  the  cases  that  were,  accordingly,  not  included  in  the 
study  could  very  well  have  been  more  mild  but  were  not  survived  for  some  other  reason 
dmieration,  such  as  fire.  Additionally,  much  is  based  on  the  very  conservative  case  of  a  95th 
percentile  accident;  however,  data  reported  within  the  Guide  suggest  a  factor  of  2'f  in  magnitude 
between  the  90th  and  the  96th  percentile  accident,  which  varies  considerably  from  the  normal 
ma^tude  of  the  true  statistical  difference  between  90tb  and  96  percentile  (a  20%  change  rather  than 
a  200%  change).  There  is  no  clear  justification  for  tiie  90th  or  96th  percentile  survivability  goal  to  be 
adopted,  other  than  as  an  arbitrary  goal  for  which  the  degree  of  feasibility  remains  to  be  determined. 


The  95th  percentile  objective  wad  apparently  adopted  as  such  an  arbitrary  objective  for  the  Army, 
which  has  the  option  to  set  goals  and  determine  feasibility  in  a  speciHc  design  context,  and  then  also 
has  the  ..uthority  to  waive  those  elements  that  are  not  considered  feasiUe  and  practical  within  the 
context  of  Army  needs. 

Continued  Comment:  Now,  after  several  years  experience,  the  general  approach  and  commentary 
presented  by  present  authors  suggest  that  the  “criteria”  are  really  guidelines  and  goals  from  which 
practical  trade-offs  must  be  made.  Additionally,  the  exclusion  of  certain  types  of  severe  accidents 
causes  no  problems  for  the  analysis  of  light  aircraft  crashes  for  Army  purposes  amd  given  their 
freedom  to  waive  guidelines.  A  light  aircraft  accident  of  sufficient  severity  to  have  “random, 
unprectible  crash  kinematics”  would  rarely  have  a  survivor.  This  is  not  true  in  the  commercial 
environment.  Because  of  the  size  and  inherent  energy  absorption  from  body  flexing  of  a  large 
commercial  aircraft,  crash  forces  to  which  the  occupants  are  exposed  can  vary  conaiderably  through 
the  aircraft.  It  is  not  uncommon  for  there  to  be  a  few  survivors  even  in  a  severe  accident  at  flight 
speeds  and  with  “unpredictable  crash  kinematics.  "Thus  the  methodology  for  establishing  crash  load 
criteria  developed  in  the  Guide  should  not  be  applied  to  commercial  aircraft. 

AIRFRAME  STRUCTURAL  CRASHWORTHINESS 

In  Uie  updated  Guide,  discussion  starts  with  the  basic  requirements  for  survival,  i.e.,  a  protective 
structural  envelope  and  the  attenuation  of  impact  forces  Basic  design  goals/requirements  are  also 
stated,  recognizing  that  improvements  may  be  feasible  but  using  qualitative  terms  m  recognition  that 
achievements  will  be  limited. 

AIRFRAME  CRASHWORTHINESS 

General  Design  Considerations— The  U  S  Army’s  Aircraft  Crash  Survival  Design  Guide  appears  to 
be  specifically  intended  to  define  criteria  for  vehicles  designed  to  support  the  Army  capability  "to 
conduct  prompt  and  sustained  combat  incident  to  operations  on  land.”  AU  the  combat  ground- 
support  functions  described  involve  the  potential  of  exposure  to  enemy  fire  while  at  some 
nominal  altitude,  i.e.: 

1.  Command,  control  and  communications 

I 

2.  Intelligence 

3.  Mobility 

4.  Fire  power 

5.  Combat  service  support 

'The  Army  inventory  includes  both  hebcoptcr  and  fued-wing  aircnft.  The  maximum  capacity  of 
any  listed  aircraft  is  a  crew  of  2,  with  20  passengers.  The  helicopter  inventory  used  for  such 
purposes  includes  (figure  D-3.2): 

1.  Observation  (OH) 

2.  Attack  (AH) 

3;  Utility  (Ulfl 
4.  Cargo  (CH) 


5.  Training  (TH)  (with  ita  own  special  cases) 
Fixed-wing  aircraft  include  (Hgure  3.3) 


1.  U’O 

2.  U-3 

3.  U-21 

4.  U-8 

5.  C-12 

6.  UV-18 

7.  OV-l 

However,  the  authon  suggest  that  infonnatioo  presented  in  the  airframe  structural  crashworthineas 
volume  (Volume  HI)  apphes  to  any  light  aircraft. 

They  qualify  this  in  the  same  paragraph,  in  a  statement  that  the  impact  environment  is  similar  for 
all  types  of  existing  light  fixed-wing  and  rotary-wing  aircraft  except  for  lateral  impact.  Lateral 
impact  levels  for  cargo  and  attack  helicopters  are  said  to  compare  to  light  fixed  wing  aircraft,  and 
other  helicopters  experience  a  more  severe  lateral  impact  environment 


The  authors  go  on  to  sUte  that  experience  and  reason  indicate  that  there  will  continue  to  be 
accidents  that  tnreaten  occupant  survival.  However,  their  position  is  “acceptable  aircraft 
stnictures  should  always  provide  the  greatest  possible  degree  of  occupant  protection  from  crash 
conditions.  All  available  information  should  ^  considered  ...  to  ensure  that  new  designs  srill 
be'aoceptably'  craahsrorthy.’  They  consider  desirable  conditions  to  include  multiple  load  paths  to 


keep  the  structure  intact  in  spite  of  localiaed  damage.  However,  they  recognize  that  excessively 
strong  structure  does  not  necessarily  meet  this  i  objective;  in  the  nonyielding  modes,  it  srill 
contribute  high  acceleration  and  involve  both  sreigikt  penalties  and  energy  absorption,  constraints. 


The  95th  percentile  design  load  limits  based  on  severe  crash  accelerations  in  this  guide  set  several 
new  criteria  compared  to  the  earlier  version;  they  also  trad  to  shift  the  emphasis  from  peak 
accelerations  to  average  accelerations,  'fheir  requiramenta  (for  a  severe  craah)  compared  to  FAA 
requirements  for  a  minor  crash  are  shosm  in  figu^  D-3.4  and  D-3.5. 

Impact  conditions  may  include: 


Helicopter 

1.  Vertical  impact  from  power  failure  during  U 

2.  Inverted  impact  (and  other  impact  attitudesj 
Light  fixed-wing 

1.  Vertical  impact  srith  stall  near  ground 


w  power  maneuver  at  low  altitude 
foilosring  rotor  contact  srith  srires,  trees,  etc. 


Figure  D-3  3  -  U  S.  Army  Fixed-Wing  Light  Aircraft  (From  Army  CSDG) 
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Figure  D-3.4  -  Summary  of  Crash  Impact  Conditions  tor  Helicopters  and  Light  Fixed-Wing , 
Aircraft  Design 


Compared  to  the  figure  3.4  data,  commercial  aircraft  size  certified  according 
to  FAR  PART  25.561,  Emergency  Landing  Conditions,  Para  (b)  which  requires  that 

"...the  structure  be  designed  to  give  each  occupant  every  reasonable 
chance  of  escaping  serious  injury  in  a  minor  crash  landing  when 

(1)  proper  use  is  made  of  seats,  belts  and  all  other  safety 
design  provisions; 

(2)  the  wheels  are  retracted  (where  applicable); 
and 

(3)  the  occupant  experiences  the  following  ultimate  inertia 
forces  acting  separately  relative  to  the  surrounding  structure: 

( i)  upward  2.0g 

(ii)  forward  9. Og 

(iii)  sideward  1.5g 

(iv)  downward  4.5g  or  any  lesser  force  that  will  not 
be  exceeded  when  the  airplane  absorbs  the  landing 
loads  resulting  from  impact  with  an  ultimate  descent 
velocity  of  five  f.p.s.  at  design  landing  weight." 


Vertical  loading  to  6.Cg  for  a  type  I  (transport)  seat  was  later 
imposed  to  acconmodate  gust  loads  (Technical  Standard  Order  TSO  37.136, 
Aircraft  Seats  and  Berths,  TSO  C39a;  and  National  Aircraft  Standard 
(NAS)  809,  Specification-Aircraft  Seats  and  Berths,  January  1,  1959). 

3g  cargo  nets  are  used,  which  are  also  cited  in  the  Guide  as  used 
by  the  U.S.  Air  Force  in  the  USAF  463C  pallet  system  with  "statistically 
rare  likelihood  of  causing  Injury." 


Figure  0-3.5  -  FAR  Part  25  Criteria 


2.  Longitudinal  impact  with  obetacles,  (e.g.,  mountains,  ground  obetacles)  or  nose  down  diving 
attitude 

0.  Cartwheeling 

Secondary  impacts  such  as  hitting  a  ridge  after  the  initial  crash  are  “generally  less  severe  for 
occupants.”  Hazards  from  detached  components  (e.g.,  engines),  penetration  (e.g.,  by  tn  s),  and 
fire  and  water  become  more  severe. 

STRUCTURAL  DAMAGE 

In  the  Guide’s  discussions  of  helicopter  and  light  Haed-wing  aircraft  crashes,  it  is  stated.  ...“Th.j 
structural  damage  that  produces  occupant  injury  is  generally  the  same  for  both  types  of  aircraft. 
Structural  damage  in  severe  accidents  cannot  be  avoided.  However,  improvements  in  airframe 
structure  and  optimization  of  elment  distribution  can  work  to  control  the  manner  in  which  structural 
damage  occurs  so  that  a  survivable  environment  is  more  likely  to  be  maintained.” 

The  structural  scenario  is  one  of  localized  deformation  at  contact  until  kinetic  energy  is  absorbed 
over  a  relatively  kmg  stopping  distance  or  until  enough  structure  is  involved  to  produce  a  significantly 
shorter  and  higher  deceleration  force.  Likelihood  of  damage  increases  srith  build  up  of  large 
decelerative  forces,  which  may  in  turn  cause  aircraft  buckling  and  compression  of  the  protective 
calan  shell.  Cabin  deformation  may  be  r^uced  by  permitting  parts  to  break  free  on  impact;  however, 
this  may  produce  no  significant  reduction  in  impact  loads. 

Variations  on  this  Army  scenario  of  crash  loads,  direction  and  build-up  include:  (1)  Longitudinal: 
deformation  of  forward  areas  ip  such  a  way  as  to  form  a  scoop  which  picks  up  earth.  Alternatively, 
the  nose  might  roll  under  the  aircraft  In  more  direct,  head-on  crashes  into  the  ground,  the  nose 
generally  deforms  to  destroy  the  occupied  section.  (2)  Vertical:  from  high  sink  rate  or  roll-over  which 
crushes  occupiable  volume,  or  transmits  high  vertical  loads  to  the  occupants.  (Lateral  roll-over 
occurs  with  helicopters).  (3)  Lateral  impacts:  from  rotor  actions  or  roll-over  that  relates  to  the  high 
center  of  gravity  with  helicopters  aPd  from  spin-in  with  light  Hzed  wing  aircraft  (4)  Lateral  or 
l<mgitudinal:  transverse  bending  loads  may  deform  or  rupture  the  shell;  (5)  Any  of  the  arash 
scenarios  may  create  floor  buckling  which  may  degrade  integrity  and  strength  of  floor  structure,  or 
landing  gear  may  penetrate  the  fuselage;  and  rupture  of  fuel  or  ignitable  fuel  containers  is  a  frequent 
cause  of  Are. 

DESIGN  REQUIREMENTS  -  (GUIDELINES)  GENERAL 

According  to  Guide  authors,  “aircraft  systems  should  be  designed  to  prevent  occupant  fatalities  and 
minimize  the  cumber  and  severity  of  occupant  mjuriea  to  severities  as  were  defined  in  figure  D-3.4  to 
the  maaimum  extent  practicaL”  Areas  cited  for  attention  include: 

1 .  Deformation  of  airframe  protective  shell  in  e  controlled,  predictable  manner  to  minimize  forces 

nn  nmipentj  and  meintain  the  pmtortive  aheil,  minimiTing  iw^ping  KiwUing  anr)  ff  il^if 

loading  of  floor  structure 

2.  Tiedown  strength 

3.  Occupant  acceleration  environment 

4.  Occupant  environment  hazards 

5.  Poatcrash  hazards 
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Stated  (helicopter)  impact  criterion  conditions  are  to  ram  a  wall  at  15  ft/sec  longitudinally  (similar 
to  low  speed  automotive  bumper  test)  with  the  aircrew  to  both  siurvive  and  evacuate  the  cockpit, 
and  with  the  airframe  capable  of  longitudinal  (front  end  contact)  of  4Q  ft/sec  without  reducing  the 
cabin  compartment  by  more  than  15%. 

Guidelines  include  recommendations  for  sufficient  strength  to  prevent  bending  or  buckling  failure, 
fuselage  to  buckle  outward  rather  than  inward,  personnel  to  be  positioned  away  from  likely  fuselage 
fracture/failures  points,  sufficiently  strong  structure  provided  around  surrounding  exits  to  assure 
postcrash  operability,  and  cargo  tiedowns  included  that  will  restrain  cargo  should  fuselage  bending 
failure  occur.  Other  considerations  are  to  avoid  reducing  the  width  of  the  occupied  areas  by  more 
than  15%,  or  permitting  either  lateral  coUapae  or  structural  intrusion  of  occupiable  portions  that  would 
be  hazardous  to  human  life  (including  entrapment).  Wings  and  empennage  should  fail  outside  the 
occupant  protection  area.  Engine  and  (helicopter)  transmission  mounts  should  stay  attached  and 
avoid  hazardous  displacements.  Helicopter  rotor  blades  should  not  dicplace  in  a  manner  hazardous 
to  occupants  during  rollover  in  roll  or  pitch  (on  sod),  or  from  the  force  generated  by  strikes  by  the 
outer  10%  of  rotor  span  on  an  8-in.  diameter  rigid  cylinder.  Failure  of  the  landing  gear  should  not  result 
in  failure  of  seats,  restraint  systems,  or  tiedowns.  Load  limiter  atten  .  .  ion  is  suggested,  to  contain 
loads  to  less  than  those  produced  by  20  ft/sec  vertical  impact  y. 

COMMENT:  These  goals  offer  no  particular  problem  as  guidelines.  However,  it  is  very  likely  nearly 
impossible  to  assure  that  such  objectives  can  be  met  in  advance  or  have  been  met  after  the  fact. 

ANCILLARY  EQUIPMENT  RETENTION 

Retention  of  ancillary  equipment  at  criterion  loads  is  “required."  Load  limiting  devices  should 
minimize  the  likelihoc^  of  equipment  to  enter  an  occupant  strike  envelope.  Stowage  should  provide 
easy  view  of  the  area  and  easy,  reliable  accessibility  in  a  way  that  cargo  shifting  or  fuselage  distortion 
will  not  prevent  access.  Single  motion,  five-second  removal  should  be  provided.  Stowage  space  for 
nonrestrained  items  that  are  not  regularly  carried  aboard  an  aircraft  should  be  provided  in  all  aircraft. 
This  space  should  be  located  so  that  the  items  stored  in  it  cannot  become  hazardous  to  personnel  in 
a  survivable  crash. 

Ancillary  equipment  includes: 

1.  Emergency  equipment 
(!>xygen  bottles 

Fire  extinguishera 
First  aid  kits 
Portable  searchlights 
Crush  axes  , 

2.  Survival  equipment 
Survival  kits 

Life  jackets 
Locator  beacons 
Special  clothing 
Food  and  water 

3.  Subcomponents 

Panel-type  consoles  containing  control  circuitry 
Radio  and  electronic  equipment 
Auxiliary  power  units 


Batteries 

Special  equipment 

4.  Miscellaneous  equipment 
Navigation  kits 
Briefcases 
Log  books 
Flashlights 
Luggage 
Toolboxes 

INTERFACE  OF  RETENTION  SYSTEMS  WITH  AIRFRAME,  AND  CARGO  RETENTION 

Occupant  retention  should  ensure  that  occupants  are  retained  in  piecrash  positions  during  cited 
cnmh  loads.  Additionally,  occupant/cargo  retention  systems  that  interface  with  airframe  and  cargo 
restraint  should  ut'lize  tie  points  that  are  integral  to  the  frame.  Loads  should  be  evenly  distributed  and 
tie  downs  should  handle  loads  at  the  worst  case  angle  without  yielding.  Load  limiters  should  be  used 
when  structure  of  fuselage  and  floor  is  not  strong  enough  to  handle  cargo  craah  loads.  However, 
nets  used  to  restrain  small  cargo  should  feature  low  elongatimi  characteristics  in  order  to  reduce 
travel  to  a  minimum.  Army  Guide  cs'go  load  criteria  are  16  G  peak  (8  G^y^  with  a  longitudinal 
velocity  change  of  43  ft/sec  in  contrast  to  the  USAF  successful  experience  with  3  g  systems  — 
USAF  463c  pallet  systems.  When  cargo  is  stowed  behind  the  passengers...  “lower  criteria  (90th 
percentile  pulse)  are  acceptable  since  a  net  designed  for  a  given  load  would  be  loaded  to  a  lower 
value  in  most  accidents,”;  by  the  same  reasoning  lateral  restraint  with  a  load  limiter  is  called  out  as 
10  G  (peak,  triangular,  5  G^ye)  21  ft/sec  from  a  90th  percentile  crash. 

More  spedflc  factors  in  retention  include: 

1.  Crew  and  passenger  locations  relative  to  cargo 

2.  Type  of  aircraft 

3.  Likely  crash  modes  versus  tiedown  back  up  structure  (simplest,  most  effective  tiedown  should 
be  used) 

4.  Type  of  cargo  restraint  criteria,  aircraft  response  to  crash  load  an .  clearance  envelopes 

5.  Aircraft  and  cargo  tiedown  provisions 

6.  Cargo/peraoonel  clearance  envelopes 

7.  Tfpt  of  restraint  devices  available  (and  potential  for  detehocation) 

Cargo  restraint  load  limiters  are  recommended  by  the  authors  of  the  Army  Guide,  to  meintein  load 
level  and  control  physical  motion  of  shifting  cargo  to  space  not  occupied  personnel.  A  buffer 
spacing  is  recommeOded  for  personnel  aft  of  the  cargo,  to  allow  for  restraint  system  elasticity  (for 
cargo  restraint  with  a  5  G  rebound  load).  Additionally,  combining  restraint  devices  of  differing 
elasticity  and  yield  points  of  caMe,  rope,  strap,  or  chain  should  be  considered  since  premature  failure 
of  stiffer  devices  may  set  off  a  chain  reactioa.  Guide  authors  indicate  practical  limits  of  displacement 
are  a  significant  factor  in  related  trade-offs,  but  tiedown  design  loads  may  also  be  important 
Although  the  goal  does  not  appear  to  be  specifically  related  to  persimnel  safety,  the  Army  Guide 
authors  recommend  design  of  the  cargo  floor  for  16  G  down-loading  (peak  or  average  not  stated). 
Additionally,  protection  against  forward  and  lateral  displacement  lequirrments,  as  well  as  down  and 
up  are  not  defined  since  they  are  nat  considered  to  be  as  potentislly  hazardous.. 


COMMENT :  The  resulting  Amy  reconunendations  for  load  limit  factors  are  included  in  figure  D-3.6 
which  appears  to  represent  some  kind  of  a  two-way  limit  on  dynamic  and  static  loading.  These 
curves  are  used  by  the  U.S.  Amy,  but  have  not  been  justified  as  a  new  basis  for  setting  criteria. 
Compared  to  USAF  and  FAA  commercial  3  G  netting  restraint  criteria  disc-’^^ed  pR*-ii>r,  these  criteria 
are  quite  conservative.  Additionally,  the  dramatic  change  in  load  level  criteria  as  the  'survivable” 
crash  changes  from  the  95th  percentile  to  the  90th  percentile  is  pu2zlihg.  Results  indicate  that  this 
may  not  be  true  statistical  sample.  To  say  the  least,  it  is  unusual  for  a  change  amounting  to  a  factor  of 
2  to  occur  in  this  percentile  spread  regardless  of  the  parameter  (or,  in  other  words,  accounting  for 
50%  of  the  total  range). 

AIRFRAME  PRINCIPLES  AND  CONCEPTS 

Authors  of  the  Guide  take  the  position  that  certain  criteria  are  applicable  whether  results  are 
approximate  or  precise: 

1. .  Structure  surrounding  occupiable  area  must  remain  reasonably  intact,  without  signiHcantly 
reducing  space.  Otherwise  other  “efforts  to  improve  survivability  ...  are  futile.” 

2.  Ideally,  “structure  should  minimize  occupant  accelerations  to  survivable  levels  in  a  severe 
crash  environment  while  maintaining  the  required  survivable  volume,  retaining  large  mass  items, 
interior  equipment,  seats  and  cargo,*  and  considering  effects  from  roll  over,  cabin  penetration, 
etc. 

By  U.S.  Amy  philosophy,  aircraft  structure  should  first  be  designed  for  nomal  loads,  operations, 
performance,  space,  fatigue  life,  etc.,  then  secondly  to  handle  nomal  payload  conditions.  Then  “the 
effects  of  crash  loads  must  be  considered  to  deteminc  where  structural  modirications  are  needed  to 
improve  crashworthiness.” 

COMMENT:  This  reinforces  earlier  conclusions  of  the  present  critique,  that  the  new  Guide  gives 
greater  emphasis  to  practical  improvements  for  safety  and  turvivability  purposes  after  basic  mission 
design  is  completed. 

FUSELAGE  CONSIDERATIONS 

I 

Design  of  the  fuselage  can  control  both  the  degree  of  collapse  and  the  level  of  acceleration 
experienced  bjr  occupimts  during  a  crash.  On  the  one  hand,  selected  regions  can  be  designed  to 
withstand  greister  forces  without  collapse.  On  the  other  hand,  defomation  end  collapse  of  other 
structure  in  unixxupied  regions  can  be  u^  to  improve  energy  absorption  potential.  Other  variables 
and  trade-offs  to  be  considered  include  the  following  related  U.S.  Amy  design  concepts.  However, 
design  considerations  listed  below  may  not  be  applicable  .to  commerci^  jet  aircraft.  For  example, 
operating  speeds  for  large  commercial  aircraft  har^y  make  survival  of  a  30*  impact  at  1 30  kn  landing 
speeds  a  likely  outcome;  this  is  not  unlike  the  evaluation  by  Guide  authors  of  100  ft  free  fall  as 
unsurvivable. 

Related  U.S.  Army  Design  Concepts 
Longitudinal  Inpact 

) .  Methods  <  if  reduced  earth  scooping  for  longitudinal  impact,  including  ieformauun  control  and 

use  of  th  i  overlap  from  shingling  of  joints  in  skin  to  prevent  skin  defomaticu  leading  to 
scooping  df  earth. 

2.  Im^ct  at  gles  up  to  30*,  including  the  rapid  change  in  pitch  angle  to  realign  the  fuselage  with 
the  impact  surface,  and  osaodated 


•  Fuselage  bending  failure 

•  Effacta  on  floor  structure 

•  Decrease  in  occupant  volume 
Vertical  Impact 

1 .  More  limited  energy  absorption  stroke 

•  Shorter  distance,  fewer  tradeK)ff  models 
'  •  Energy  absorption  strokes  can  include: 

•  Gear 

•  Fuselage 

•  Floor 

•  Seat 

•  Cushion 

2.  Control  of  conditions  for  vertical  collapse 

•  Dissipation  of  ener^  according  to  where  the  mass  is  concentrated. 

•  Structural  desifipi  to  control  both  elastic  (recovering)  and  plastic  ( .eforming)  energy 
absorption  and  for  cabin  integrity  design  to  enhance  absorption  below  floor  level 

Lateral  Impact  and  Rollover  Protection,  from: 

1.  Design  of  butt  line  beams,  longitudinal  floor  beams,  and  main  box  frames 

2.  Preventing  intrusion  by  rotor  blade  and  other  external  members 
Other. 

1.  Energy  absorption  by  incremental  rotor  whipping  and  failure,  or  by  wing  loading  and  failure 
(wings  can  absorb  up  to  5  G) 

2.  Breakaway  wing  fuel  tanka 

3.  Engine  mounts  keeping  engines  (helicopter  and  front  located  fixed/wing)  attached  to  basic 
structural  member 

4.  Rigid  emergency  exit  structure  to  prevent  deforming  (to  withstand  at  least  a  5  G  load) 

5.  Emergency  exit  access  for  rapid  egress 
8.  Fuel  Tanks 


•  Maximum  possible  distance  to  occupiable  areas 

•  Away  frctn  probable  ignition  sources  so  much  as  feasible;  (engine  compartment, 
battery,  other  primary  ignition  sources) 

•  Away  from  probable  impact  damage,  e.g.,  landing  gear  penetration 

•  (Controlled,  t.«nk  structural  deformation,  e.g.,  by  regular  stncti^ai  shape  to 
minimize  deformation  pressure 

•  Fuel  cell  sup^rts  to  deform  without  tearing 


Materials  and  Str  uctural  Properties 

Material  contributions  to  controlled  collapse  for  failure  modes  of  metallic,  nonmetallic  and  composite 
materials  include: 

1.  (Controlled  collapse  mechanisms 

2.  Material  failure  modes  that  do  not  produce  r'r'ojectiles 

3.  Joint  designs  and  fastener  selections  that  control  failure  mechanisms  and  minimize  the 
formation  of  projectiles 

Applications  of  material  properties  for  crashworthiness  include  absorption  of  energy  through 
sthictiiral  deformation,  degree  of  protective  shell  distortion/retenlion  for  the  occupiable  section,  use 
of  surrounding  structure  as  a  buffer,  and  occupant  protective  devices.  Material  ductility  helps  to 
ensure  that  crushing,  twisting  and  buckling  can  occur  without  rupture.  Nonsparking  material  on 
impact  surfaces  helps  to  reduce  post  crash  fire  hazard. 

Examples  of  controlled  failure  modes  include: 

1.  Minimize  inward  buckling  structures,  such  as  sidewalls,  bulkheads,  and  floora. 

2.  Use  deforming  joints  and  attachment  fittings  to  control  failure  modes. 

3.  Minimize  materials  that  suddenly  unload  with  brittle  fractures,  causing  additional  impulse  effects 
and  potentially  progressive  failures  in  adjacent  structures. 

4.  Minimize  failures  of  members  that  result  in  penetration  by  jagged  ends  into  occupied  space  or 
fuel  cells,  or  by  failed  structure  or  exterior  agents. 

5.  Avoid  excessive  distortion  of  emergency  exit  surrounds  that  might  constrain  the  postcrash 
opening  of  doors  or  windows. 

6.  Protect  flammable  fluid  containers  from  penetration 

Some  of  the  new  materials  characteristics  and  trade-offs  that  are  already  recognized  are: 

1.  Structural  designs  may  also  contribute  to  controlled  deformation. 


2,.  Composites  save  weight,  but  have  different  strength  versus  ductility  properties.  Additional 
energy  absorbing  material  in  strategic  areas  may  become  necessary.  Selected  energy  and  load 
limiting  absorbing  concepts  from  the  Guide  are  presented  in  figures  D-3.7  and  D-3.8. 

3.  Alternatively,  filler  materials  such  as  honeycomb  and  structural  foams  may  achieve  adequate 
energy  absorbing  performance.  However,  mission  requirements  may  limit  use. 

4.  Thermal  mismatch  of  new  materials  may  become  a  problem  from  unequal  expansion  and 
contraction  due  to  normal  temperature  changes.  Representative  characteristics  are  provided  in 
the  Guide. 

Controlled  deformation  for  helicopters  can  permit  full  use  of  the  landing  gear  in  a  vertical  stroke  for 
some  unpact  modes.  Use  of  landing  gear  for  energy  absorption  offers,  potentially,  a  larg?  absorption 
factor  for  vertical  loads  (e.g.,  an  18-in.  stroke,  1 8.25  G  peak,  9.125  Ggvg,  load  limited  gear  at  100% 
efficiency  would  totally  absorb  a  42  ft/sec  impact  velocity).  However,  little  advantage  from  landing 
gear  failure  is  suggested  for  longitudinal  impact  —  at  160  mph,  landing  gear  failure  is  suggested  by 
the  Guide  to  absorb  only  1%  of  the  kinetic  energy.  Additionally,  avoiding  hazards  from  gear  failure  is 
identified  as  a  significant  problem;  the  recommendation  is  a  design  that  keeps  the  ^ear  away  frem 
the  fuselage  or  from  flammable  fluids,  or  even  sets  up  the  gear  to  be  carried  away  on  impact. 

COMMENT:  Distinctions  in  operations  and  design  on  the  one  hand  and  in  inherent  s  ructural  flexibility 
and  ductility  on  the  other  hand,  when  comparing  large  flexible  body  aircraft  to  the  rigid  body  small 
aircraft,  will  make  a  great  deal  of  difference  in  both  the  type,  quality,  and  degree  fc  which  the  above 
structural  feiitures  might  be  beneficial.  For  example,  landing  gear  axe  specifically  i  lentified  as  a 
potentially  large  energy  absorber  in  the  rigid-body  aircraft  for  low  speed  vertical  impacts,  but  offer 
little  energy  absorption  at  “high"  speed  horiZ'^utal  impacts  that  approximate  stall  speeds  for  large 
commercial  transports.  Also,  landing  gear  location  and  the  conditions  of  impact  offer  a  different 
situation  so  far  as  gear  failure  is  concerned.  Guidelines  regarding  nonintrusion  ere  similar  to  existing 
FAA  requirements,  e.g.,  nonintrusion  of  gear  into  the  electrical  and  fuel  systems  when  the  gear  fails. 

Accordingly,  this  section  of  the  Guide  offered  a  number  of  guidelines  and  qualifications  that  bear 
consideration  in  design.  However,  quoted  criteria  levels  cannot  be  applied  to  commercial  aircraft 
unless  research  can  establish  levels  appropriate  to  large  flexible-body  aircraft. 

EVALUATION  TECHNIQUES 

ANALYTICAL  METHODS 

Simulation  may  be  by  analytical  models,  scale  models,  computer  models  and  full-scale  tests  in  order 
to  provide  both  observation  of  complex  interactions  and  a  rational  basis  for  the  seqtiencing  of  events, 
loads  and  modes  of  failure.  Volmne  HI  of  the  Guide  presents  a  major  section  on  the  basic  elements  of 
some  of  these  methods.  They  will  not  be  abstract^  here. 

As  outlined  in  the  Guide,  numerous  computer  simulation  models  in  particular  are  being  developed  for 
use  in  simulation  evaluations.  Some  are  being  developed  for  support  of  preliminary  design  studies; 
others  for  more  sophisticated  uses.  The  five  main  classes  of  models  that  are  used  include: 

1.  Simplified  spring  mass  models 

2.  Generalized  spring  mass  models 

3.  Hybrid  models 
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Figure  D-3. 7  -  Examples  ot  Energy  Absorbing  Devices  (From  Army  CSDG) 
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figure  D-3.8  -  Sample  of  Energy  Absorbing  Concepts  (From  Army  CSDG) 


4.  Frame  type  models 

5.  Finite-element  models 

The  first  two  classes  differ  in  level  of  detail.  Frame  type  models  use  beam  elements  instead  of  spring 
elements  and  lumped  or  rigid  body  masses  at  beam  element  intersections.  They  may  be  two- 
dimensional  or  three-dimensional.  Hybrid  models  require  static  component  tests  to  obtain 
mechanical  properties  of  structure.  The  finite-element  approach  uses  more  formal  approximation 
approaches  for  more  discrete  definition  of  structural  representation  and  properties.  Finite-element 
models  tend  toward  increasing  complexity  end  computational  cost  .  How<  ■.  m,  none  of  the  modeling 
procedures  is  totally  free  of  testing  requirements  and  analytical  judgment.  The  reason  is  the 
extremely  complex  process  for  vehicle  structure  deformation  under  crash  loading,  which  involves: 

1.  Transient,  dynamic  behavior 

2.  Complicated  framework  and  shell  assemblies 

3.  Large  deflections  and  rotations 

4.  Extensive  plastic  deformations 

COMPUTERIZED  METHODS  OF  ANALYSIS  (SUte-Of-The-Art  Sumicary, 

Not  From  Guide) 

Impact  dynamics  of  a  real  crash  involving  complicated  structural  design  are  too  complex  for  manual ' 
analysis;  however,  modeling  methods  offer  on  eventual  capability  that  could  provide  a  simulation  of 
all  the  dynamic  interactions.  For  example,  numerous  dynamic  models  of  the  human  body  have  been 
developed  for  crash  impact  analysis  to  predict  the  response  of  ihe  occupant,  restraint  and/or  seat 
systems. 

One-,  two-,  and  three-dimensional  models  have  been  developed.  More  brpadly  described  in  this 
present  report  are; 

1.  Dynamic  Response  Index  (DRI)  (ref.  D-5) 

2.  SOM-LA  (Seat  Occupant  Model:  Light  Aircraft)  (ref,  D-7) 

3.  PROMETHEUS  (now  PROMETHEUS  HI,  two-dimensional  mode  with  rratraint  performance 
inte^ted  with  body  dynamics  and  other  outputs  similar  to  SOM-LA)  (ref.  D-8). 

Occupant  Modeling  Summary 

Three  occupantrsimulation  computer  programs  are  evaluated  in  foUowing  paragraph  with  regard  to 
their  ability  to  prbduce  useful  engineering  trade-off  data  regarding  relative  safety  of  a  restraint 
occupant  a  one-dimensional  model  (ORl),  a  twodimensional  model  (PROMETHEUS  IH)  and  a  three- 
dimenaional  model  (SOM-LA). 

The  oce-dimensional  (DRI)  model  is  usable  only  for  seat  ejection  evaluati'm  and  is  of  no  use  for 
evaluating  the  safety  of  commercial  aircraft  Tlie  twodimensional  model  (PROMETHEUS  HI)  is 
suitable  for  producing  sophisticated  engineering  trade-off  data  and  is  being  used  for  this  purpose, 
subject  to  the  limitations  imposed  by  the  two-dimensional  nature  of  the  simulation.  The  thres- 
dimensibnal  model  (SOM-LA)  needs  modeling  improvementa  before  being  usable  for  engineering 


purposes.  The  needed  improvements  are  technically  difficult  and  fail  into  the  realm  of  applied 
research.  Although  SOM-LA  is  not  currently  adequate  for  evaluation  of  restraint  system 
performance,  it  provides  a  rough  approximation  of  the  gross  motion  of  the  occupant  for  purposes  of 
obtaining  the  dynamic  loads  on  the  seat  structure. 

The  possibility  of  merging  these  programs  with  a  large  finite-element  computer  program  such  as 
DYCAST  is  also  considered  and  a  procedure  for  accomplishmg  the  merging  is  proposed. 

Prograin  Calibration 

Computer  modeling  of  transient  structural  dynamics  is  p  relatively  new  technology,  and  standards 
defining  what  is  a  good  structural  dynamics  computer  program  are  still  evolving.  (Occupant- 
simulation  is  a  special  type  of  structural  dynamics).  As  a  consequence,  each  new  structural 
dynamics  computer  program  must  individually  earn  acceptance  in  the  oigineering  community  before 
its  calculations  will  be  utilized  by  designers. 

There  are  two  aspects  to  acceptance.  First,  the  program  must  produce  believable  results.  That  is, 
predicted  dynamics  should  appear  r ’jasonable  and  credible  to  the  designer  and  the  designer  should 
be  confident  that  the  program  models  the  main  dynamic  effects.  To  enhance  believability,  the 
program  output  should  contain,  in  readable  form,  information  which  assists  the  designer  to 
understand  the  dynamic  events  (such  as  time-histories  of  system  forces).  Graphic  aids  are 
also  helpful. 

The  second  ingredient  vital  to  engineering  acceptance  is  demonstration  of  program  accuracy.  That 
is,  demonstration  of  capability  to  reasonably  predict  an  actual  test  Achievement  of  predictive 
accuracy  is  usually  a  very  difficult  and  time  consuming  process  for  occupant-simulation  codes 
because  of  the  nonlinear  nature  of  the  problem  and  the  difficulty  in  obtaining  measured  values  for 
dynamic  parameters.  The  calibration  of  the  PROMETHEUS  III  occupant-simulation  computer 
program  will  be  described  to  illustrate  how  this  process  might  work. 

Instrumentation  data  from  several  sled  tests  were  obtained  from  the  Federal  Aviation  Agencies  Civil 
Aero  Medical  Institute  (C  AMI).  Physical  data  for  the  anthropomorphic  dummies  were  obtained  (limb 
weights,  measurements,  spring  constraints).  Properties  were  eetimated  where  measured  data  could 
not  be  found.  One  of  the  CAMI  tests  wu  then  simulated  by  PROMETHEUS. 

When  the  initial  simulation  did  not  provide  satisfactory  correlation  with  test  data,  the  problem  was 
attacked  from  two  directions.  First,  it  was  evident  that  the  restraint  system  model  in  PROMETHEUS 
was  inadequate,  so  a  more  sophisticated  mathematical  model  of  the  lap  belt  and  shoulder  harness 
was  developed  and  added  to  PROMETHEUS.  For  example,  the  lap  belt  was  refined  to  permit  the 
slipping  associated  with  submarining,  the  shoulder  harness  was  refl^  and  chest/shoulder  flexibility 
was  added  to  appropriately  incorporate  hamessAxxly  interactions  and  slipping  of  the  harness  on  the 
shoulder. 

The  second  approach,  which  was  attempted  concurrently  with  the  first,  was  to  parametically  vary  the 
mechanical  properties  of  the  simulated  occupant  (such  as  neck  stiffness  and  damping)  in 
PROMETHEUS  simulations  and  note  the  resulting  trends.  The  parametric  variations  helped  provide  a 
feel  for  the  occupant  dynamics  and  served  as  sensitivity  studies  to  identify  the  important  dynamic 
parameters.  Some  dynamic  effects  were  observed  which  were  not  influenced  by  the  parametric 
variations;  additional  modifications  were  made  to  the  mathematical  modeling  in  PI^METHEUS  and 
parametric  evaluations  completed  to  approximate  these  effects.  Additional  cycles  of  modeling 
improvements/parametric  variations  continued  until  correlation  with  actual  test^ta  was  achieved. 


The  resulting  modeling  changes  to  PROMETHEUS  were  quite  extensive;  so  much  so  that  the 
correlated  model  was  renamed  PROMETHEUS  HI.  Figure  D-3.9  summarizes  the  parametric 
variations  and  modeling  changes  required  to  achieve  calibration. 

After  calibration,  an  independent  test  case  was  simulated  with  PROMETHEUS,  producing  good 
agreement  with  actual  test  results  involving  a  real  Part  572  dummy  in  sled  testing.  Figure  D-3.10 
indicates  the  correlation  finally  achieved. 

Review  of  Occupant  Simulation  Computer  Programs 

Three  occupant-simulation  models  are  reviewed  in  following  paragraphs.  These  consist  of  a  one- 
dimensional  model  (the  spring-mass  model  associated  with  the  Dynamic  Response  Index  (DRI),  and 
a  comparison  of  a  two-dimensional  model  (PROMETHEUS  HI)  and,  a  three-dimensional  model  (SOM- 
LA). 

The  models  are  examined  from  twe  viewpoints  —  Hrst,  as  a  tool  for  engineering  design  of  a 
seat/restraint  system,  and  second  as  a  possible  candidate  for  integration  into  a  large  structural 
dynamics  simulation  computer  program  in  order  to  model  the  complete  system  (aircraft,  seat  and 
occupant)  in  a  single  simulation. 

One-Dimenaional  Model  (DRI)  —  A  one  degree  of  freedom  dynamic-response  model  of  a  human 
occupant  has  been  proposed  (ref.  D-5).  The  model  consists  of  a  simple  linear  spring  and  damper, 
and  a  point  mass.  The  '3pring  is  sized  by  the  compressive  stiffness  of  the  lumbar  vertebrae  and  the 
damper  is  sized  by  human  vibration  tests. 

The  DRI  is  an  injury  scale  associated  with  this  model.  The  DRI  for  a  deceleration  pulse  is  the  ratio  of 
the  peak  compressive  spring  force  which  occurs  when  the  model  is  excited  by  the  pulse  to  the 
weight  of  the  point  mass.  To  associate  tolerance  levels  with  the  DRI,  the  DRI  was  calculated  for 
existing  ejection  seat  designs.  The  computed  DRI  values  were  plotted  against  the  percentage  of 
ejections  in  which  spinal  injury  occurred;  the  curve  thus  obtained  represents  an  approximation  of 
injury  probability  as  a  function  of  DRI. 

Both  the  simple  occupant  model  on  which  the  DIU  is  based  and  the  DRI  itself  are  very  limited  in 
application:  the  simple  model  could  only  be  used  for  cases  in  which  ^e  loading  is  purely  vertical,  that 
is  G2  such  as  in  ejection  seats.  It  is  obviously  not  applicable  to  model  a  restrained  occupant  under 
forward  loads;  in  this  case  the  main  effect  is  the  combined  stiffness  of  the  restraint  system  and  the 
occupant’s  pelvis/chest.  Even  for  acceleration  the  model  is  difHcult  to  use  since  potentially 
signiRcant  effects,  such  ak  the  effect  of  seat  pan  stiffness,  are  neglected. 

The  DRI  is  based  on  a  model  which  does  not  adhere  closely  to  the  actual  dynamics  of  an  ejection. 
The  seat  pan  stiffness  is  not  considered,  nor  is  the  distribution  of  body  mass  along  the  spine  or  the 
weight  of  the  occupant.  Thus,  the  DRI  can  be  expected  to  produce  useful  data  only  in  crashes  which 
are  pretty  much  like  a  seat  ejection  —  that  is  purely  +  Gj  acceleration,  seat  pan  stiffness  similar  to  the 
stiffness  of  a  fighter  pilot's  seat  and  the  occupant  strapped  tightly  in. 

The  Army  Crash  Survival  Design  Guide  says  of  the  DRI: 

"Although  the  Dynamic  Response  Index  (DRD ...  is  the  only  model  correlated  extensively  for 
ejection  seat  spinal  injury  pr^timi,  it  has  serious  shortcomings  for  use  in  accident  analysis.  It 
assumer  the  occupant  to  be  well  restrained  and  erect,  so  that  the  loading  is  primarily 
compressive,  with  insignificant  bending.  Although  such  conditions  may  be  Sssumed  for 
ejection  seats,  they  are  less  probable  for  helicopter  crashes,  in  which  an  occupant  may  be 
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leanir.g  to  either  side  for  better  visibility  at  the  t'me  of  impact.  Further,  the  DRI  was  correlated 
for  ejection  pulses  of  much  longer  duration  than  typical  crash  pulses.” 

“A  more  detailed  model  of  tht  spinal  column  would  yield  more  realistic  results,  but  injury  criteria 
for  the  more  complex  responses  have  yet  to  be  developed.  Consequently,  the  DRI  is  not 
recommended  as  the  criterion  for  use  in  designing  crashworthy  seats.” 

Review  of  Two-Dimensional  and  Three-Dimensional  Occupant  Simulatiop  Computer  Programs  —  The 
following  discussion  reviews  and  compares  the  two-dimensional  program  PROMETHEUS  m 
(ref.  D-8)  and  the  three-dimeneional  seat-occupant  model  —  light  aircraft  tSOM-LA)  (ref.  D-7). 

PROMETHEUS  III  was  developed  at  Boeing  in  a  series  of  applications  for  varied  purposes,  starting 
from  the  Dynamic  Science  program,  SIMULA.  The  focus  of  the  most  recent,  PROMETHEUS  HI,  has 
been  on  accurate  modeling  of  the  occupant  and  restraint  system.  PROMETHEUS  IH  has  smee  been 
used  extensively  to  develc  <  data  for  assisting  in  engineering  design  decisions. 

SOM-LA  development  was  sponsored  by  the  Federal  Aviation  Agency  through  a  series  of  contracts 
with  various  companies  and  universities,  'fhe  emphasis  in  SOM-LA  development  has  been  on  the 
detailed  seat  model.  A  new  version  of  SOM-LA,  termed  MSOM-LA  was  completed  under  number 
OTFA03-80-C-00098.  The  occupant  model  has  been  upgraded  in  MSOM-LA. 

Development  of  Basis  of  Evaluation  —  Boeing  is  one  of  very  few  places  that  an  occupant 
simulation  computer  program  (PROMETHEUS  HI;  has  beei  developed  and  demonstrated 
sufficiently  to  be  used  es  a  trade-off  tool  in  the  engineering  design  process.  This  experience  is 
drawn  upon  to  establish  criteria  for  continued  evaluation  of  occupant-simulation  computer 
ptograms. 

The  design  questions  for  nrhich  PROMETHEUS  HI  simulations  were  employed  to  provide 
engineering  data  were  quite  varied;  the  common  denominator  was  that  all  questions  related  to 
relative  occupant  safety.  Of  coarse,  and  due  in  part  to  the  limitations  of  existing  human  tolerance 
data,  it  is  rarely  possible  to  predict  with  certainty  whether  injury  would  have  occurred  in  a  given 
crash  on  the  basis  of  a  computer  simulation;  similar  questions  nsay  also  be  unanswered  in  dummy 
tests.  However,  in  most  cases,  computer  Simula  Jon  is  the  only  practical  method  for  obtaining 
trade-off  data  for  specific  questions,  and  on  a  timely  basis. 

To  be  usable  for  this  Sort  of  design  question,  an  occupan^sunulaticn  computer  program  requires 
two  major  attributes. 

First  it  must  be  able  to  model  a  very  general  structure  (not  just  a  seat),  and  be  able  to  model  contact 
between  the  occupant  and  any  part  of  the  structure.  (For  example,  impact  of  an  occupant  with  the 
seat  ahead). 

The  second  feature  is  that  the  program  must  provide  data  which  may  be  used  for  estimation  of 
comparative  injury  potential  This  means  that: 

1.  The  program  must  have  been  calibrated  by  predicting  to  test  data  (preferably  from  live  human 
testa  or  from  dummies  demonstrating  at  least  partial  correlation  with  human  data). 

2.  Time-histories  of  forces  acting  on  individual  body,  segments  of  tb~  occupant  modd  should  be 
printed  and/or  charted. 

3.  Time-histories  of  torques  acting  in  joints  of  the  occupant  (e.g.,  the  elbow)  should  also  be 
printed  and/or  charted. 


4 .  Time  varying  internal  loads  acting  on  flexible  body  segments  (such  as  the  lumbar  spine)  should 

be  printed  andyor  charted. 

Of  course,  the  standard  software  features  relating  to  ease  of  progra.a  i  are  also  desirable  —  that 
is,  ease  of  input,  autonutic  data  checking,  legibility  of  output,  and  availability  of  graphic  aids. 

Comparative  Evaluation  of  PROMETHEUS  IH  and  SOM-LA  —  Figures  D-3.11,  D-3.12,  and  D-3.13 
constitute  checklists  of  features  needed  fcr  engineering  design  usage  of  occupan^simulatioD 
computer  programs.  Checklist  items  were  obtained  pragmatically  from  experience  in  using 
PROMETHEUS  III  to  develop  design  trade^iff  data.  The  amount  of  use  of  PROMETOEUS  III  justified 
incorporadoo  of  most  checklist  items  into  PROMETHEUS  IQ;  consequently  the  lists  serve  mainly  to 
indicate  desirable  impio'.’emrats  in  SOM*LA.  An  improved  version  of  SOM-LA  is  named  MSOM-LA. 
The  -nain  improvement  in  the  new  model  is  an  improved  seat  model  which  is  capable  of  modeling 
energy  absorpMon.  The  occupant  modal  Lss  also  been  improved  by  the  incorporation  of  a  flexible 
segment  representing  the  'uuibar  spine.  | 

_  i 

The  major  deficiency  in  PROMETHEUS  IQ  is  that  it  has  only  been  possible  to  perform  limited, 
exploratory  calilmtioa  against  live  human  test  data  and  for  similar  reasons  limited  exploration  of  seat 
model  dynamics.  Added  calibration  of  this  type  ir  lesirable.  A  benefit  is  that  mechanisms  within  the 
two-dimensional  PROMETHEUS  IQ  model  are  easier  to  comprehend  than  those  within  a  three- 
dim.nsional  model,  giving  an  added  plus  for  initial  use  of  a  two-dimensional  model  in  calibration 
efforts.  Other  than  development  which  may  be  required  to  achieve  such  calibration,  further  model 
evolution  must  consider  limitations  intrinsic  to  the  two-dimensional  nature  of  the  model  and 
distinguiah  the  conditions  for  using  a  2-D  or  a  3-0  model.  Of  course,  current  uncertainties  in  the  level 
of  human  tolerance  to  transient  loads  are  a  constraint  that  must  be  observed  for  either  2-D  or 
3-D  modela  ' 

SOM-LA  could  benefit  from  both  human  da^  calibration  and  model  improvement  (from  the 
standpoint  of  usrfulness  for  engineering  design).  There  are  two  major  modeling  deficiencies —  the 
restraint  system  model  and  the  difficulty  of  modeling  nonstandard  seats  and  structure.  Both 
represent  difficult  modeling  problems  in  a  three-dimensional  environment,  and  the  methods 
developed  to  simulate  these  features  in  the  two-dimensional  PROMETHEUS  IQ  computer  program 
do  not  rvadily  generalue  to  three  dimensions. 

SOM-LA  has  a  very  primitive  restraint  system  model.  The  restraining  belts  are  pinned  to  the  body, 
so  realistic  modeling  of  a  restrained  occupant  is  impossible.  SOM-LA  also  has  limited  flexibility  in 
the  type  of  restraint  system  which  may  be  modeled.  Nonstandard  configurations,  such  as  restraint 
system  with  crotch  or  thigh  straps  could  not  be  simulated.  In  addition,  harness  friction  is 
implementod  incorr*ctly  (friction  is  crudely  and  incorrectly  simulated  by  reducing  the  tension  in 
the  strap  segment  running  from  the  lap  belt  to  the  shoulder  by  12%).  Another  serious  def^  is 
that  chest  compressibility  (which  effects  shoulder  harness  f^sds)  is  not  modeled. 

Accordingly,  this  simple  restraint  system  model  is  inadequau  for  engineering  design  use  for 
evaluating  restraint  system  performance.  It  introduces  uncertainty  into  the  accuracy  of  predict xl 
body  loads  and  accelerations,  since  the  dynamic  performance  of  the  restraint  system  is  one  of  the 
primary  sources  and  conduits  of  transmission  of  crash  loads  tn  the  occupant. 

The  second  major  SOM-LA  deficiency  is  the  limited  seat  structural  configurations  which  may  be 
simulated.  It  is  possible  that  more  generality  is  available  in  MSOM-LA.  In  addition,  it  is  desirable 
that  MSOM-LA  be  capable  of  simulating  contact  between  the  occupant  and  an  arbitrary  structure 
(e  g.,  the  back  of  the  seat,  ahead).  This  finite  element  “contact  problem"  is  difficult  an  i  is  the 
subject  of  current  research  (e.g.,  reference  D-8). 
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Belt  Slip  X 

:il  Seat 

Cushion  Forces  X 

Reactions  X 

Nodal  Forces  X 

Element  Forces  X 

V  Crash  Pulse  X 

f  Printer  Plots 

Acceleration  Traces  X 

(vs  time) 

Snapshots  of  Victim/Seat  X 
Locus  of  Segment  c.g. 's  as  - 
Functions  of  Time 


Note  t:  It  is  assumed  that  the  output  features  of  SOM-LA  and  MSOM-LA 
are  essentially  the  same. 


Figur9  0-3.  T2  -  Comparison  o*  Program  Output  Featuraa 


OM-LA 


MSOM-LA 


I  Occupant 

Spinal  Articulation  5  links 

Flexible  Lumbar  Link  X 

Flexible  Cervical  Link  X 

Automatic  Initial  Position  X 

Generation 

Compressible  Chest,  pelvis,  X 

II  Restraint  System 

Realistic  friction  X 

Free  to  slide  on  victim  X 

Webbing  Stretch  ■  X 

III  Seat 

Finite  Element  Model  X 

Bar  Elements  X 

Beam  Elements  X 

Plate  Elements 

No.  of  elements  in  typical  6* 

seat  model 

Cusiiior.  X 

Energy  Absorption  X 

Aircraft  Interior  Modeled  X 

IV  Crash  Pulse 

Translation  Components  X 

Rotational  Components 

V  Calibration  against 

experiment 

Anthropomorphic  Ounwy  X 

Live  Human  *** 


4  links 


5  links 
X 
X 
X 


X  Capability  Available 


In  addition  to  these  research  improvements,  several  straightforward  and  rather  easy  software 
improvements  would  enhance  usability  of  the  code: 

1.  Calculate  and  display  time-histories  of  loads  acting  on  the  occupant  (e.g.,  spinal  loads, 
segment  forces,  joint  torques). 

2.  Improve  the  algorithm  fo'  ’u>mputation'of  joint  torque. 

3.  Add  printer  plot  “snapshots’’  of  seat  and  occupant  for  appraising  occupant  location  at  reelected 
tiroes  (two  views)  for  realism  and  possible  comparisoii  with  slow  motion  movies. 

Incorporation  of  SOM-LA  into  Large  Crash  Dynamics  Code 

It  may  become  necessary  to  acquire  or  predict  dynamic  interactions  of  occupant  and  floor.  Simple 
predictions  m^y  be  possible  with  SOM-LA.  Action  has  been  started  within  the  government  with  the 
goal  to  marry  the  3-D  SOM-LA  with  a  large  finite-element  computer  program  (e.g.,  the  3-D  DYCAST) 
in  order  to  model  an  aircraft  crash  in  a  single  simulation  that  more  properly  couples  the  dynamics  of 
the  occupants  and  the  aircraft  structure. 

To  accomplish  this  marriage,  it  is  suggested  that  the  occupant/  restraint  model  be  extracted  from  the 
SOM-LA  occupant/rrstraint/eeat  model  and  .‘packaged  as  a  “super-element.’’  The  occupant  super¬ 
element  would  then  be  inserted  into  the  large  finite-element  programs  as  a  module,  although,  as 
noted  previously,  improvements  in  the  SOM-LA  restraint  system  model  are  needed  to  model 
occupant  dynamics  accurately.  The  existmg  SOM-LA  occupant/restraint  system  model  would 
probably  be  adequate  far  the  purposes  of  calculating  the  gross  dynamics  of  the  seat. 

The  finite-element  code  would  be  utilized  to  model  the  seat  —  that  is,  the  SOM-LA  seat  model  would 
not  be  used.  (This  presumes  the  development  of  a  general  contact  model  to  simulate  forces  acting 
between  the  seat  and  occupant).  The  contact  model  would  be  used  to  simulate  seat  cushions.  This 
concept  has  three  advantages; 

1.  Simulation  of  multiple  occupants  becomes  possible  (e.g.,  a  triple  seat). 

2.  Synchronization  of  the  numerical  integration  schemes  (i.e.,  the  procedures  for  solving  the 
equations  of  motion  aa  fimction  of  time)  in  SOM-LA  and  the  finite-element  program  is  not 
t^uired.  The  integration  acheibe  of  the  finite-element  program  is  utilized  for  both  occupant(8) 
and  sthicture. 

3.  'The  capability  of  the  finite-element  computer  can  be  employed  to  model  very  general  seat 
designs. 

It  would  be  possible  to  use  the  large  Anite-element  program  to  n«,xiet  the  occupant.  The  advantage  of 
the  super-element  is  that  occupant  modeling  requires  some  features  that  are  not  generally  needed  in 
general  finite-element  modeling  of  structures,  such  as  limits  on  angular  motion  of  limbs  at  joints. 
Moreover,  occupant  modeling  is  rather  specialized,  and  the  correct  mechanical  parameters 
describing  the  occupant  are  not  widely  known  (in  same  cases  supportive  data  are  not  known  at  all 
and  parameters  must  be  inferred  by  parametric  sensitivity  testing).  Thus,  it  would  be  difficult  for  a 
nonspecialiat  to  construct  an  accurate  model. 

Additional  effort  would  be  required  to  make  the  occupant  super-element  work;  provision  for 
truismitting  input  data  to  the  super-element  and  obtaining  printouts  of  detailed  occupant  time- 
histories  is  required.  In  addition,  the  graphics  output  from  the  finite-element  program  (if  graphics  post 
processing  is  available)  must  be  adjusted  to  draw  the  occupant/s)  in  addition  to  the  structure. 


Tne  same  procedure  could  be  used  to  lift  the  two-dimensional  occupant  model  from  PROMETHEUS 
in  if  a  two-dimensional  crash  simulation  were  employed.  However,  there  is  little  benefit  to  expect 
from,  for  example,  using  such  a  model  in  an  overturning  or  cartwhei  ling  light  aircraft  where  violent 
interactions  of  all  three  dimensions  of  motion  would  be  occurrug. 

SCALE  MODEL  TESTING 

This  third  approach  to  evaluation  is  constrained  by  the  dynamic  operation  of  all  system  elements  in 
impact  loading.  While  used  in  other  areas  of  testing  (aerodynamic,  bridge  design,  buildings,  etc.) 
crashworthiness  testing  using  scale  models  is  more  difficult,  and  credibility  becomes  more  suspect 
when  plastic  deformation  and  rupture  may  occur  in  the  real  environment.  Such  parameters  are  very 
difficult  to  represent  in  a  scale  model.  Appropriately  approximating  the  material  properties  in  scale 
models  is  very  difficult. 

TESTING 

There  will  remain  vast  differences  in  opinion  regarding  the  degree  and  type  of  testing  needed'  to 
demonstrate  suitability  of  a  given  design.  Authors  of  the  new  Guide  take  the  position  that  testing, 
including  “instrumented  full-scale  crash  tests  should  be  conducted  to  verify  analysis  performed  and 
to  substantiate  the  capability  of  the  aircraft  system  to  prevent  occupant  fatalities  and  minimize  the 
frequency  and  severity  of  occupant  injuries  during  crashes  of  ...  criterion  level  severit 
Instrumented  drop  ^esta  for  landing  gear  should  be  conducted  to  verify  analytical  predictions  and 
performance  to  G  criteria,  including,  20  ft/min  sink  rate  with  10*  nose  down  and  10*  roll.  A  drop  test 
to  a  sink  speed  test  of  42  fKsec  with  level  attitude  should  also  be  conducted.  (Helicoptor  is  implied 
for  drop  teats  by  reference  to  rotor  lift).  Static  testa  for  restraint  systems  are  recommended  to 
design  loads,  with  “sufficient  dynamic  testa”  to  confirm  that  analyses  are  supported  by  static  test. 
Static  tests  of  components  tied  to  structure  by  their  normal  attachment  provisions'should  be 
required'  to  demonstrate  compatability.  Proof  loading  instead  of  ultimate  crash  design  loads  is  an 
acceptable  minimum  condition. 

Design  checklists  are  provided  to  more  easily  record  and  check  performance  to  the  above 
conditions.  Fuc!  cell  considerations  are  added.  Fuel  cell  items  are  to  keep  fuel  away  from  impact  area 
and  from  occupiable  areas,  with  containment  emphasized  (e.g.,  avoid  projections  that  might 
puncture;  use  frangible  and  self-sealing  couplings  where  separation  might  occur). 

COMMENT:  Army  full-scale  testing  of  small,  relatively  inexpensive  vehicles  uses  drop  towers  or 
swings,  and  testing  is  obviously  dramatically  different  in  achievability  and  cost  for  their  helicoptor  and 
light  fixed-wing  aircraft.  The  contrasting  situation  is  the  very  large  and  expensive  vehicles  that  can 
not  be  readily  positioaed  on  a  drop  tower  or  a  pendulum  swing,  sudt  as  the  large  aircraft  in  Air  Force 
inventory  and  large  commercial  aircraft  where  full-scale  impact  testing  is  not  done.  Certainly,  there 
are  many  order  of  magnitudes  of  difference  in  complexity,  test  systems,  data  interpretation  for  any 
serious  attempt  to  do  testing  with  a  large,  flexible-body  aircraft  system  with  extensive  structure  and 
complicated  structural  dynamics. 


4.6  HUMAN  IMPACT  TOLERANCE  AND  PROTECTION 
IMPACT  TOLEJIANCE  CONSIDERATIONS 
CRASH  ENVIRONMENT 

The  Army  aircraft  impact  loading  scenario  varies.  Severe  impacts  more  typically  include  a  sequence 
of  events,  including:  (1)  landing  gear  stroke  and  wheel  failure,  (2)  fuselage,  with  both  ground  and 
fuselage  deformation,  and  (3)  energy  absorbing  stroke  ol  the  seat.  For  Army  aircraft,  high 
longitudinal  and  lateral  loads  may  be  apphed  to  the  seat  after  gear  and  fuselage  deformation  —  some 
military  aircraft  use  a  “weU*  or  depression  in  the  floor  to  provide  stroke  distance,  and  stroke  control 
then  becomes  important.  Additionally,  allowing  any  more  longitudinal  or  lateral  deformation  “than 
necessary  could  increase  the  risk  of  head  or  chest  impact  on  surrounding  structure."  Stroke  limiting 
and  load  limiting  tradeoffs  may  become  necessary. 

Crash  load  trade-offs  for  the  Army’s  light  aircraft  as  described  in  the  Guide,  are  based  on  a  series  of 
worst  case  situations  for  each  of  several  components  with  little  or  no  accumulative  “credit”  for 
beneficial  features  for  each  that  contribute  to  an  overall  improvement.  Thus,  design  criteria  are 
specified  for  components,  as  well  as  for  the  entire  system.  One  example  given  as  a  justification  is 
gear  stroke  and  failure  that  may  occur  in  a  way  contributing  to  lateral  loading,  such  as  from  a  single 
gear  failure,  or  from  hitting  the  ground  with  a  high  roll  angle,  in  helicopters,  continued  rollover 
appears  common,  even  without  added  impulse  from  the  mein  rotor  blades  after  gear  failure. 
Accordingly,  the  Guide  authors  have  concluded  that  multiple  directional,  complex,  and  violent  crash 
leinoTTuitira  of  Army  aircraft  (including  flip  over  or  upside  down  impact)  demand  strength  requirements 
in  all  directions,  including  upward  and  aftward.  Lower  impact  load  criteria  are  imposed  for  those  Army 
aircraft  that  are  less  likely  to  encounter  some  cf  the  conmtiona.  Crash  environment  studies  for  Army 
vehicles  also  distinguish  between  impact  loads  for  light  fixed-wing  aircraft  and  helicopters.  Fixed- 
wing  stall/spin  accidents  can  produce  i.  gh  lateral  loadings  with  resultants  in  the  jongitudihaiyiateral 
(or  yaw)  plane.  Helicopters  show  a  high  incidence  of  side  impacts  or  rollover  after  accidents. 

IMPACT  INJURIES 

In  Army  systems,  head  injuries  were  the  leading  cause  of  major  and  fatal  injuries,  accounting  for  31% 
of  all  fatal  injuries.  Leg  and  chest  injuries  tended  to  be  next,  varying  in  rank  from  one  airplane  to  the 
next 

Breakdown  of  injuries  according  to  aircraft  type  demonstrated  that  serious  vertebral  injuries  were 
lower  for  light  Hx^-wmg  aircraft  and  cargo  helicopters  than  the  othera.  The  rationale  presented  is 
that  the  stall/spin  characteristic  of  the  fixed-wing  aircraft  and  the  larger  crush  distance  beneath  the 
floor  of  the  cargo  helicopter  reduced  vertical  loads. 

HUMAN  TOLERANCE  TO  IMPACT 

Discussions  of  human  tolerance  point  out  that  in  spite  of  the  multitude  of  experiments;  few  criteria 
useful  in  system  design  have  been  developed  and  validated. 

Toleraixe  data  presented  are  relatively  standard  in  the  literature,  most  particularly  from  a  summary 
reported  by  Eiband  (figure  D-4.1,  from  tbs  U.S.  Army's  Aircraft  Crash  Survival  Design  Guide,  also 
used  in  ref.  D-3).  These  authors,  reference  conditions  where  injuries  have  occurred  in  Mime 
particular  cases  as  a  basis  for  avoidance.  Reported  are  bases  for  Head  Injury  Criteria  (HIQ 
(recommended),  and  DRI  for  spinal  injury  criteria  (not  recommended,  see  “Evaluation  Techniques”, 


Figure  D-4.1  -  Fore  and  Aft  Whole-Body  "Tolerance  Limits" 


page  to  come).  In  the  Guide,  leg  injury  criteria  are  established  at  2000  lb  for  time  less  than  20  msec. 
“'Although  some  research  has  been  conducted  on  the  tolerance  of  other  body  parts,  such  as  the 
neck,  thorax  and  abdomen,  well  defined  valid  criteria  have  not  been  established.”  Variations  in  leg 
injury  data  presented  in  the  Guide  illustrate  the  point.  Additionally,  numerous  related  literature 
reviews  have  been  conducted.  Results  from  an  Aerospace  Industry  Association  Study  by  the 
Transport  Airworthy  Requirements  Committee  (ALA-TARC  Study,  ref.  D-3)  are  repeated  in  Figure 
D-4.2  for  information  purposes. 

Actually,  data  regarding  human  tolerance  to  impact  still  leaves  many  areas  for  uncertainty  and 
disagreements.  One  obvious  difficulty  is  that  stressing  the  live  human  body  to  tolerance  limits  is 
impossible.  Tests  with  volunteers  are  necessarily  at  subcritical  levels.  Accordingly,  animal  research 
has  provided  much  of  the  data  that  is  used.  Additionally,  human  cadavers  have  been  used  as  test 
specimens.  However,  age,  sex  and  state  of  health  for  live  people  (and  for  cadavers)  can  influence 
tolerance.  Additionally,  mathematical  models  and  anthropometric  dummies  are  being  used  to 
develop  better  understanding  of  the  kinematics  and  forces  involved  and  to  develop  an  improved 
mechanism  for  injury  prediction. 

Overall  probability  of  survival  depends  to  a  large  extent  on  manner  of  restraint,  particularly  to  control 
the  upper  and  lower  torso  and  protect  the  head  and  chest.  Strongest  restraint  load  points  for  such 
control  are  the  pelvic  girdle,  the  shoulder  structure,  and  the  rib  cage.  Restraint  effectiveness  is 
related  to  contact  area  and  force  distribution,  the  body  location  for  application,  and  the  degree  to 
which  residual  movement  is  controlled.  However,  protecting  the  arms  and  legs  from  contacting  the 
interior  during  flailing  is  concluded  by  authors  of  the  Guide  to  be  extremely  difficult;  in  most  cases, 
the  cocoon  that  would  be  required  to  produce  such  containment  is  quite  impractical.  Another 
problem  is  caused  by  loose  restraint,  whi^  contributes  to  magnified  accelerative  forces.  The  abrupt 
halt  in  forward  occupant  motion  with  the  taking  up  of  the  slack  in  restraint  then  magnifies  restraint 
loads  on  the  body  and  on  the  hardware  —  a  condition  called  dynamic  overshoot. 

The  authors  of  the  new  Guide  indicate  that  their  main  areas  of  concern  for  configurations  featuring 
only  a  lap  belt  are  the  potential  for  bead  injury  and  the  potential  for  submarining.  They  urge  use  of  a 
shoulder  harness  in  addition  to  th:?  oelt  as  a  favored  solution,  although  it  is  recognixed  that 
connecting  the  harness  to  the  belt  buckle  will  pull  it  up  and  increase  potential  for  submarining  — 
which  could  load  up  the  abdominal  wall  as  well  as  flexing  the  spinal  column.  To  counter  this  potential, 
a  lap-belt  tiedown  is  recommended  by  the  authors  of  the  Guide,  and  is  actiially  used  by  all  services. 

COMMENT:'  In  a  survey  conducted  for  the  TARC  216-10  study,  leading  experts  in  the  field  were 
speciflcally  questioned  about  this,  with  none  reporting  to  have  observed  submarining  when  only  the 
lap  belt  (without  shoulder  harness)  was  used.  Trade-offs  of  belt-harness  characteristics  will  .be 
presented  in  a  later  paragraph. 

WHOLE-BODY  ACCELERATION  TOLERANCE 

The  Guide  authors  emphasize  a  fact  that  is  seldom  discussed.  Whole-body  cbes^to•back  tolerance 
has  been  demonstrated  to  be  as  much  as  45  G  for  pulse  durations  leas  than  0.044  sec.  This 
decreases  to  25  G  for  0.2  sec.  Some  debilitation  snd  injury  may  occur  at  these  levels.  In  other 
words,  survivability  is  not  a  nice  simple  constant  that  is  readily  engineered,  and  man  is  not 
necessarily  a  45  G  system. 

Tolerance  estimates  for  aftward  loading  (eyeballs  in)  are  not  accurately  established.  Forces  of  83  G 
for  0.04  sec  has  been  experienced  in  a  ba^waid  facing  seat,  followed  by  debilitation,  shock  and 
on-the-scene  medical  treatment  Accordingly,  the  authors  estimate  tolerance  to  be  between  this 
83  G  and  the  45  G,  0.1  sec  condition  acMpt^  for  the  forward  facing  case. 
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Figure  D-4.2  -  Literature  Sources  for  Body  Tolerance  Data 


Vert'cal  (eyeballs  down)  loading  threatens  lumbar  compression  fracture,  again  with  a  variable  range 
for  injury  potential;  potential  for  visceral  injury  is  also  greater,  since  vertical  loads  place  a  greater 
strain  on  the  suspenuon  system.  Eyeballs  up  loads  are  on  the  order  of  15  G  for  0.1  sec. 

Lateral  accelerations  are  less  v'ell  explored.  Volunteers,  with  only  lap  belts,  withstood  9  G  for 
0.1  sec.  With  belt  and  shoulder  harness  they  withstood  11.5  G  for  0.1  sec.  Other,  less  well 
protected  lateral  impact  cases  have  apparently  suffered  serious  injury. 

From  the  information  presented  by  Guide  authvirs,  rate  of  onset  for  the  force  also  has  an  influence, 
although  one  that  is  not  well  understood.  Rates  as  high  as  28,000  G/sec  have  been  survived  under 
very  special  circumstances  which  provided  an  exceptional  distribution  of  body  loads.  In  general, 
lower  rates  of  onset  are  preferable. 

According  to  Volume  II  of  the  G  aide  several  scales  have  been  proposed  for  tolerance  of  various  body 
members: 


Gadd  Index 
J-Tolerance 

Effective  Displacement  Index 
Wayne  State  Tolerance  Curve 

No  index.  Two  studies  of  tolerance  to  rotation 

Abbreviated  Injury  Scale 

Little  Data.  Marked  disagreements  between  investigators. 
Models  estimating  loads  available 

DRI  (spinal  deformation,  force)  (simple  model  of  complex 
system) 

Wayne  State  University  two-dimensional  model 
Air  Force  Head  Spine  Model 

Femur  Injury  Criteria  Peak  load  of  1700  pounds 

COMMENT:  Results  from  using  such  scales  provide  guideline  information  that  can  be  used  for 
“order-of-merit”  purposes.  Some  unpublished  reports  suggest  that  further  research  and 
development  might  be  warranted;  factors  of  two  or  more  difference  between  resulting  "criteria”  and 
undamaged  survival  are  not  unusuaL 

OCCUPANT  MOTION  ENVELOPES/STRIKE  ZONES  FOR  PROTECTIVE  CONSIDERATION 

Since  kinematics  of  body  action  can  be  violent,  dynamic  responses  of  the  body  with  different 
restraints  have  been  evaluated  to  define  the  motion  envelope  (including  flailing)  of  all  body  parts. 
Earlier  discussion  pointed  out  that  containment  of  lim^  was  difficult-to-impossible.  Lateral 
displacement  of  the  upper  torso  may  be  extensive,  even  with  a  shoulder  harness:  However,  clearing 
the  strike  zone  of  structural  parts  may  not  be  feasible.  The  alternative  is  to  design  so  that  injury  . 
potential  is  minimized,  e.g.,  by  energy  absorbing  supports  and  padding  material. 

“CLEARED/PROTECTED’' (Strike  Zone) 

Body  strike  zones  are  defined  for  a  95th  percentile  Army  aviator  during  a  downward  acceleration. 


1.  Head- Windshield  Impact: 

2.  Neck  Impact: 

3.  Chest  Impact 

4.  Abdominal  Impact 

5.  Spinal  Injury  Potential 


6.  Leg  Injury 


wearing  a  restraint  system  consisting  of  a  lap-belt,  crotch  strap  and  shoulder  harness,  A  lap-belt-only 
configuration  strike  zone  is  used  for  older  Army  aircraft,  (fig.  D-4.3).  Hazards  are  rated  as  primary 
(threat  to  head  and  chest),  secondary  (lower  extremity  injury  or  entrapment),  and  tertiary  (upper 
limbs).  For  Army  purposes,  head  protection  is  considered  essential,  using  helmets,  padding  and 
energy  absorbing  structure. 

Areas  identified  for  flight  crew  protective  measures  include  the  instrument  panel  (padding,  frangible 
breakaway  or  ductility),  rubber  pedals  (avoid  crushing  entrapment),  control  column  (break  4  1a., 
above  the  pivot  point,  none  through  the  instrument  panel).  For  the  gunner,  identified  areas  include 
eyepiece  location,  inertial  harness,  a  power  haulback  inertial  reel,  inflatable  restraint  to  reduce  slack, 
frangible/  breakaway/collapsable  features  (not  to  exceed  500  lb  of  force). 

HUMAN  BODY  DIMENSIONS  AND  MASS  DISTRIBUTION 

The  Army  Guide  uses  specific  criterion  dimensions  for  design  of  physical  or  mathematical  simulators 
of  the  body.  Details  are  reported  in  the  Guide  and.  will  not  be  presented  here.  Those  presented  cover 
male  U.S.  Army  aviators  and  soldiers  for  5th,  50th  and  95th  percentile  «nH  ao  are  not  appropriate  for 
women.  Also,  information  on  complete  dimensional  movement  (e.g.,  shoulder  joint  ranges  of  motion) 
is  presented,  as  are  inertial  properties. 

HE^IMPACT  HAZARDS  PROTECTION 

Geometry  of  probable  head  impact  surfaces  is  distinctly  different  from  the  flight  deck  to  cabin  areas. 
Contact  hazards  in  the  U.S.  Army  inventory  in  1965  were  identified  as  including  the  following: 

Flight  Deck:  Window  and  door  frames,  consoles,  control  columns,  seat  backs,  electrical 
junction  boxes  and  instrument  panels. 

Cabin  Area;  Window  and  door  frames,  seats  and  fuselage  structure. 

Protection  can  be  provided  by  energy  absorbing  padding  materials,  frangible  breakaway  panels, 
smooth  contoured  surfaces  or  ductile  materials  in  such  typical  hazard  areas. 

OTHER  IMP  ACT  PROTECTION 

Concerns  as  expressed  in  the  Guide  include: 

1 .  Instrument  Panel  Structure:  Consider  use  of  energy  absorbing  padding,  frangible  breakaway 
panels,  or  ductile  panel  materials. 

2.  Rudder  Pedal  Protection:  The  Guide  maintains  that,  unless  a  tiedown  strap,  is  used,  pelvic 
rotation  will  almost  invariably  occur  with  feet  on  rudder  pedals  and  with  forward  and  downwa^ 
loads,  especially  if  belt  is  loose.  To  avoid  complications  from  the  various  possibilities,  the  pedal 
should  support  both  the  ball  and  heel  of  the  foot.  Potential  for  entrapment  or  crushing  of  the 
seat  should  be  considered. 

3.  Control  Columns;  C!ontrol  of  fracture  point  to  near  the  pivot  pmnt  is  urged.  Panel  mounted 
controllOT  are  not  recommended;  fracture  consequences  are  considered  too  uncertain  by  die 
Guide  authors. 

4.  Sighting  Systems;  Location  and  frangibility  and  restraint  poww  haul  back  inertial  reel 
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^  or  cockpit  and  cabin  interior,  energy  absorbing  padding  w-.-re  recommended  in  the  Guide  for  use 
within  the  strike  zone.  Desired  characteristics  included: 

1.  Adaptability  and  ease  of  processing 

2.  High  energy  dissipation 

3.  Effective  load  distribution 

4.  Lo,/ rebound 

5.  Temperature  insensitivity 

6.  Low  water  absorption 

7.  Resistance  to  chemicals,  oil,  ultraviolet  radiation,  and  sunlight 

8.  Nontoxic  fume  generation 

9.  Favorable  flammability  rating 

10.  Minimal  smoke  generation 

11.  Durability  and  long  life 

12.  Cost  competif  • ' 

13.  Aesthetically  acceptable 


CRASH  TEST  DUMMIES 

In  spite  of  their  limitations,  dummies  remain  one  of  the  primary  test  tools  for  dynamic  tests.  Early 
dummies  developed  in  1949  have  progressed  through  several  evolutions  to  a  standardiz  id,  more 
sophisticated  dummy  specified  for  the  Federal  Motor  Vehical  Standards  (Part  572)  by  the  National 
Highway  Traffic  Safety  Administration.  Several  more  recent  designs  have  emerged,  ail  with  the 
objective  of  improving  dummy  response  and  repeatibility  of  performances.  Some  comparison  of 
dununy  and  cadaver  response  has  been  accomplished.  Comparison  tests  of  dummy  designs  have 
been  produced,  demonstrating  among  other  things  that  complex  dummies  increase  the  number  of 
test  variables  to  a  level  that  may  exceed  experimenter  ability  to  control  the  variables  or  understand 
the  interactions  in  results. 


5.0  AIRCRAFT  SEATS,  RESTRAINTS,  UTTERS  AND  PADDING 

Thia  aection  of  the  Guide  commences  by  emphasizing  the  subsystems  that  interface  with 
occupants,  (including  the  controls  as  well  as  seats,  restraints,  litters  and  padding)  and  also  the 
basic  operational  differences  between  crew  seats  and  passenger  seats.  It  distinguishes  between 
passenger  seats  and  litters  for  transport  and  crew  seats,  emphasizing  that  the  crew’s  functional 
requirement  and  operational  responsibilities  are  ‘of  highest  priority”  while  maintaining  that 
comparable  ‘crashworthiness”  protection  is  needed. 

BACKGROUND  DISCUSSION 

Introductory  comments  in  the  Guide  express  the  position  that  a  complete  systems  approach  must  be 
employed  to  include  all  influencing  parameters,  including  economic  restraint,  conccmed  with  the 
design,  manufacture  and  overall  performance  of  the  aircraft  in  meeting  mission  requirements 
However,  an  accumulative  systems  capability  to  protect  or  absorb  energy  is  disallowed;  maximum 
capability  from  each  component  is  emphasized. 

The  intent  of  this  section  is  to  define  minimum  crash  energy  absorption  ‘requirements”  for  seats 
and  restraint  systems.  Specified  strength  requirements  are  based  on  the  crash  environments 
adopted  in  the  Army  guide  update,  as  a'c  test  requhements. 

COMMENT:  The  seat  design  requirements  stated  in  the  Guide  are  based  on  the  extreme  crash 
loads  postulated  to  occur  in  the  “9bth  percentile  survivable  Army  light  aircraft  crash.”  No 
recognition  is  given  to  the  drastic  diffeiencej  in  peak  loads  from  the  95th  to  the  90th  percentile 
which  suggest  that  the  95th  percentile  used  in  the  Guide  may  deviate  so  far  from  the  normal  (and 
implied)  use  of  such  statistics  as  to  be  unrealistically  and  excessively  high  as  a  criteria.  Other 
guidelines  are  also  in;'<u»ced  by  the  assumed  load  levels.  The  Guide  strongly  suggests  that  seats 
should  be  designer*  woh  a  vertical  energy  absorbing  stroke  to  mitigate  the  assum^  high  vertical 
loads;  littlg  discussion  is  given  to  interaction  between  vertical  and  other  dimensions  during  the 
stroke.  Better  ur.  'srsuiading  of  the  influence  and  means  of  controlling  such  interacting 
parameters  is  needed. 

SEAT  INSTALLATIONS 

Per  military  specificauoo,  ‘each  seat  occupant  is  to  be  provided  with  a  survivable  environment 
when  the  aircraft  is  subjected  to  a  95th  percentile  potenthsUy  survivable  impact."  This  vdll  require 
energy  absorption  and  otaintenance  of  ‘un-ihtrud^*  living  space  to  avoid  debilitating  injury  that 
might  preclude  timely  egress  after  craah  impact.  Candidate  methods  are  many;  sufficient 
absorption  by  landing  gear  and  structure  could  leave  little  re<)uirement  for  energy  absorption  in 
the  seat.  The  converse  also  holds,  requiring  a  long  seat  stroke.  Restraint  design  loads  transmitted 
through  the  s^t  to  the  structure  are  another  variable. 

Vertical  energy  absorption  is  mandatory  in  ^ymy  aircraft  seat  component  specifications  because 
landing  gear  also  might  fail;  a  12'in.  minimum  troke  is  recoounended,  but  may  be  precluded  by 
desired  positioning  of  the  Mat  within  the  aircralt. 

COMMENT;  The  objective  correlates  with  a  total  airplane  objective  but  continues  to  leave  questions 
regarding  statistically  imusual  and  dramatic  differences  between  90%  versus  96%.  It  does  not  provide 
assurance  that  these  "whole  body*  loads  define  seat  loads,  snd  leaves  in  doubt  the  accumulative 
effect  of  such  elements  as  slack  or  mispositioned  harness  which  may  be  beyond  the  control  of  the 
designer. 


PRIMi^BY  DESIGN  CONSIDERATIONS 


Primary  design  considerationa  for  protection  include  the  design  of  the  seats  to  be  retained  in  position 
and  use  of  an  integral  means  of  crash  load  attenuation.  Additionally,  the  occupant’s  strike  envelope 
should  be  “delethalized”,  a  tern  interpreted  by  the  present  reviewer  to  mean  padded,  frangible, 
anchor  ductile  or  otherwise  designed  so  as  to  aid  in  the  prevention  of  serious  injury.  Structural 
distortion  is  discussed  in  terms  of  its  possible  benefits  for  energy  attenuation  but  also  of  concern  is 
the  extent  of  and  effects  of  intrusion  into  the  occupant  envelope.  Trade-off  studies  are  necessary. 

RESTRAINT/SEAT/UTTER/P ADDING  DESIGN  CONSIDERATIONS 

The  U.S.  Army’s  position  is  that  occupant  protection  and  survival  should  be  a  primary  design 
consideration  for  seats;  seats  should  ‘Ibe  retained  generally  in  their  original  positions  within  the 
aircraft  throughout  any  survivable  accident.”  Additionally,  “the  seat  should  provide  an  integral 
means  of  crash  load  attenuation  and  the  occupant’s  strike  envelope  should  be  delethalized.” 

Seat  comfort  is  considered  a  pilot’s  safety-of-flight  factor,  reducing  potential  for  pilot  fatigue  in  a 
short  time  period,  rather  than  a  crash  safety  design  factor.  Pilot  comfort  “must  not  be  unduly 
compromised  to  achieve  crash  safety.”  Back  angles  over  13”  and  thigh  tangent  angles  5  to  20”  are 
recommended  in  the  Guide.  (Influence  of  seat  angles  will  be  discussed  later). 

Seat  comfort  is  considered  a  pilot’s  safety-of-flight  factor,  reducing  potential  for  pilot  fatigue  in  a 
short  time  period,  rather  than  a  crash  safety  design  factor.  Pilot  comfort  “must  not  be  unduly 
compromised  to  achieve  crash  safety.”  Back  angles  over  13*  and  ihigh  tangent  angles  5  to  20”  are 
recommended  in  the  Guide.  (Influence  of  seat  angles  will  be  discussed  later). 

Flight  crew  seats  are  typically  adjustable,  to  locate  the  eye  position  for  any  precentile  body  size  at 
the  design  eye  point. 

COMMENT:  Comfort  and  safety  requirementa  may  be  in  opposition,  as  is  the  case  for  the  seat  back 
angle  and  for  the  rigid  foam  needed  for  energy  absorption  versus  the  soft  foam  desired  for  comfort. 
Alternatively,  discomfort  may  lead  to  erroneous  adjustments  and  improper  use  of  the  protective 
designs.  Accordingly,  to  some  extent,  a  design  may  reflect  trade-offs  related  to  the  unique 
application. 

DESIGN  PRINCIPLES  FOR  SEATS 

'The  Guide  authors  point  out  that  seats  face  any  direction,  and  that  forward  facing  is  most 
common,  but  prefer  aftward  facing.  Aft  facing  seats  provide  "maximum  Contact  area  and  support.” 
For  forward  facing  flight  'Wk  seats,  the  authors  siso  recommend  s  Isp-belt  tiedown  (crotch)  strap 
for  flight  crewmen  and  consider  lap-belt-only  restraint  undesirable;  both  upper  and  lower  torso 
restraints  are  recommended.  'They  consider  side-facing  seats  iesst  desirsble  but  suggest  that  when 
side-facing  seats  are  used,  so  upper  torso  restraint  resisting  forwsrd  motion  is  needed.  Ductile 
materials  (for  energy  absorpticn)  featuring  at  least  10%  elongation  are  recommended  for  all 
critical  members  in  the  primary  los  !  paths  of  bonlosd  limited  seats,  and  featuring  at  leaut  5% 
elongation  for  loadlimited  seats). 

Seat# 

For  Army  purposes.  Guide  authors  state  single  occupant  seata  are  preferred  in  order  to  avoid 
complicated  energy  absorbing  situations  that  may  occur  for  muluunit  seats  that  are  not  fully 
occupied.  Guide  authors  considered  it  desirable  that  all  sesU  face  in  the  same  direction  to  protect 
occupants  from  loqae  equipment. 


Aftward  facing  seata  were  preferred  when  practical,  to  ‘Maximally  distribute  body  contact  area.” 
Forward  facing  aeata  were  considered  to  afford  “adequate  protection  by  the  use  of  a  restraint 
system  consisting  of  shoulder  straps,  a  lap-belt  and  a  lap-belt  tiedown  (crotch)  strap.”  The  authors 
consider  lap-belt-only  restreinta  undesirable. 

COMMENT;  Many  systems  accept  this  configuration  with  an  energy  absorbing  surrounding  area. 

Forward  facing  seats  with  adequate  restraints  are  acceptable  as  a  second  choice  to  aftward  facing 
seats.  When  single  diagonal  upper  torso  restraint  is  used,  it  should  pass  over  the  outboard  shoulder 
to  contain  lateral  impact  or  protrusion  outside  the  aircraft. 

Previous  side  facing  seats  were  provided  with  lap-belt  restraint  only.  This  arrangement  was 
considered  by  Guide  authors  td  be  inadequate,  and  least  desirable  from  the  crash  safety 
standpoint;  however  “when  no  reasonable  alternative  to  their  uae  exists,  adequate  restrain^  must 
be  provided.  If  a  single,  diagonal  upper  torso  restraint  is  used,  it  shc  uld  be  placed  over  the  forward 
facing  shoulder”  (relative  to  the  aircraft). 

Shoulder  harness  provides  minimal  protection  to  abrupt  acceleration  in  the  side  facing 
configuration.  Lateral  torso  movement  should  be  minimized  or  prevented. 

Litters 

The  supine  position  that  Utters  provide  is  ideal  for  resisting  vertical  impacts.  The  supine  position 
allows  maximum  possible  contact  area  and  force  distribution,  and  forces  are  transverse  to  body. 

Lateral  instaUstioo  should  be  provided.  It  would  prevent  body  from  sUding  off  the  Utter 
longitudinally,  and  prevents  the  Utter  from  sUding  and/or  repositioning  to  become  completely 
detached  from  supports. 

STRUCTURAL  CONNECTIONS 

Seat  Attachment  —  Cockpit  seats  are  floor  or  bulkhead  mounted.  Cabin  interior  seats  may  be:  (1) 
suspended  from  the  ceiling  with  energy  absorbers  and  wall  stabilized,  (2)  suspended  from  the  ceiling 
with  energy  absorbers  and  floor  stabilized,  (3)  wall  mounted  with  energy  absorbers,  (4)  floor 
mounted  with  energy  absorbers,  or  (5)  ceiling  and  floor  mounted  (vertical  energy  absorbers 
aboveand  below  the  seat). 

Suspension  or  mounting  of  aU  seats  should  not  interfere  with  rapid  ingress  or'  egress. 

Hardware  Materials  ->  Material  selected  for  attachment  of  webbing  should  be  ductile  enough  to 
deform  locally,  particularly  at  stress  concentrstion  points.  This  ductiUty  is  not  as  critical  when 
energy  absorbing  provisions  are  incorporated  into  the  seat  On  the  other  hand,  consistent  use  of 
ductile  materials  avoids  the  possibiUty  of  non  ductile  msteriala  on  nonload  limited  seats.  Selection 
of  materials  should  emphasize: 

1.  Best  strength-to- weight  ratios 

2.  Maintaining  ductiUty  to  prevent  brittle  failures 

3.  Standard  elastic  analysia/selection  methods  for  most  working  Ufe  conditions 

4.  Behavior  beyond  the  yield  point  analysed  for  energy  absorption  purposes. 


RESTRAINT  SYSTEMS 


DESIGN  PRINCIPLES  FOR  PERSONNEL  RESTRAINT  SVoIiiMS 

Statistics  on  U.S.  Amy  aircraft  accidents  indicate  failure  of  personnel  restraint  harness  as  a  frequent 
cause  of  injuries  and  fatalities.  From  'Volumes  I  and  III  of  the  Guide,  a  crashworthy  aircraft  is  to 
“ehmiriate  unnecessary  injuries  and  fatalities  in  relatively  mild  impacts.”  However,  Volume  III  also 
states  m  a  different  context  that  the  Army  goal  for  seat  and  restraint  systems  is  to  “reduce  occupant 
decelerative  loading  to  withm  human  tolerance  limits,”  that  “ideally  ...  structure  should  minimize 
occupant  accelerations  to  survivable  levels  in  a  severe  cra^  environment.”  In  other  words,  Amy 
policies  in  establishing  design  principles  for  personnel  restraint  systems  are  to  prevent  injury  to  all 
occupants  in  crash  conditions  approaching  the  upper  limits  of  survivability. 

Belt  and  crotch  strap  remain  the  standard  for  U.S.  Amy  flight  crews  by  recommendation  of  the 
authors  of  the  updated  guide  (crotch  straps  are  to  oppose  harness  loads  on  the  belt).  Troop  and 
passenger  requirements  were  different;  the  most  recommended  system  was  an  inertial  harness 
over  each  shoulder  connecting  to  a  center-body  lap-belt  buckle,  and  secondly,  a  system  with  a 
diagonal  shoulder-to-belt  anchor  strap  positioned  to  restrain  the  occupant  from  protruding  outside 
the  aircraft  during  lateral  loading  (similar  to  automotive  systems). 

Inflatable  restraint  belt  and  harness  were  described  as  a  more  complex  and  costly  alternative  that 
will  r^uce  restraint  slack  by  automatically  pretensioning  the  system  to  better  control  impact 
response.  Another  related  inflatable  alternative  is  air  bags,  which  are  conspicuous  in  their  absence 
from  Guide  diacussions. 

Numerous  human  body  restraint  methods  have  been  proposed,  investigated  and/or  used;  some  are 
“exceptionally,  good",  others  “left  much  to  be  desired.”  Desirable  qualities  are: 

1.  Comfortable  light  weight 

2.  Easy  to  put  on  and  remove  even  in  the  dark 

3.  Feature  a  single-pomt  release  easily  operated  with  either  hand,  and  protected  from  inadvertent 
release,  e.g.,  being  struck 

4.  Provide  freedom  of  movement  to  operate  the  aircraft  controls,  e.g.,  through  the  use  of  an  inertia 
reel  with  the  shoulder  harness 

5.  Provide  sufficient  restraint  in  all  directions  to  prevent  injury  in  a  potentially  survivable  crash 

6.  Webbing  should  provide  a  maximum  area,  consistent  with  weight  and  comfort,  for  force 
distribution  in  the  upper  torao  and  pelvic  regions  and  should  be  of  low  elongation  under  load  to 
minimize  dynamic  overshoot 

GENERAL  DESIGN  CRITERIA 

General  desigrt  criteria  are  as  follows: 


1.  Comfort  should  not  be  unduly  compromised  by  crash  survival  systems  or  improper  adjustment  by 
users  is  a  likely  outcome.  Hardware  should  not  contact  bony  portions  of  the  torso,  and  assemblages 
should  be  compatible  with  the  desired  location  on  the  body.  Webbing  should  not  be  so  wide  or  stiff 
as  to  restrict  ventilation  (or  cause  chafHng). 

2.  Emergency  release  should  be  based  on  a  single-point  release  for  the  belt-harness  combination, 
operable  by  either  hand  with  20  to  30  poimds  force  and  operable  regardless  of  the  occupant 
position  (e.g.,  upside  down).  However,  accidental  opening  should  be  prevented.  The  buckling 
system  should  be  insensitive  to  rotation  and  alight  misalignments  such  as  misaligned  pins  that 
might  shear  in  series. 

3.  Lap-belt  anchorages  involve  a  series  of  constraints:  a)  It  is  desirable  to  anchor  to  the  seat  or  the 
anchorage  must  accommodate  possible  seat  motion,  b)  Both  forward  anu  vertical  loading  mttst  be 
accommodated.  Submarining  (i.e.,  slipping  down  through  the  lap  belt)  should  be  prevented. 
However,  the  lap  belt  should  not  restrict  freedom  of  leg  motion  for  pilots,  c)  When  necessary  to 
counteract  the  up  loads  of  the  harness,  lap-belt  tiedowns  (i.e.,  crotch  straps)  should  intercept  the 
seat  pan  (14  to  15  in.  forward  of  the  seat  back),  d)  Adjustment  hardware  ^ould  carry  at  least  the 
same  design  loads  as  the  webbing  without  slipping,  crushing  or  potentially  jamming  the  webbing,  e) 
Adjustment  and  release  hardware  must  not  be  located  over  skeletal  structure  (e.g.,  lap-belt  hardware 
over  the  iliac  crests  of  the  pelvis)  and  harness  hardware  should  ride  as  low  on  the  chest  as  possible, 
f)  All  materials  should  be  ductile  enough  to  deform  locally  (with  a  recommended  minimum  elongation 
value  of  10%). 

COMMENT:  The  influence  of  belt-harness  angles  are  discussed  on  page  214. 

4.  Seat  structural  connections:  a)  Criteria  for  bolts  should  continue  as  practiced  (10  to  25%  safety 
margm  and  typical  0.25  inch  diameter  to  avoid  over-torque),  and  criteria  for  rivets  and  welds 
should  continue  as  practiced,  b)  Seat  mountings  may  vary,  including  combinations  of  ceiling, 
bulkhead  ,  and  floor,  all  using  energy  absorbers.  Structural  joints  should  permit  angular 
distortioas.  Similar  principles  and  criteria  apply  for  bulkhead  mounted  seats,  c)  Guide  authors 
preferred  that  restraints  be  anchored  to  the  seats;  the  key  factbr  is  to  permit  seat  deformation 
and  associated  energy  abscrption  to  occur  (which  could  be  inhibited  by  anchoring  harness  to 
the  floor),  and  without  loosening  of  the  belt 

5.  Webbing  and  attachments:  Restraint  harness  also  could  vary  in  required  load  capability, 
according  to  whether  a  load  limiter  is  used.  However,  authors  of  the  Army  Guide  suggest  a 
standard,  single  strength  interchangeable  harness  to  avoid  risk  of  a  mix  up  in  installation. 

,  Minimal  webbing  elongation  is  proposed  as  necessary  to  avoid  dynamic  overshoot  It  also 
minimizes  potential  for  secondary  impacts;  for  this  reason  the  Army  resists  energy  absorption 
applications.  Added  precautions  are  necessary  where  webbing  is  folded  or  bent  at  hardware 
interfaces,  in  order  to  avoid  compromising  strength  requirements,  e.g.,  from  concentrated 
loads  or  from  wear.  Energy  absorbing  webbing  is  not  recommended  for  use  in  seating 
systems. 

COMMENT:  In  computer  simulationa  done  in  the  TARC  study,  increase  in  belt  strength  and 
corresponding  reduction  in  stretching  resulted  in  a  reduction  of  “submarining  tendency”,  lumbar 
compression  and  seat  loads  but  an  increase  in  restraint  system  loads  and  thorax  loads.  The  study 
shbwed  (and  personal  communication  with  USAF  AMRL  confirmed)  that  a  level  of  belt  strength 
exists  beyond  which  further  reduction  in  stretch  avails  little  benefit. 


6.  Inertia  reeU  are  installed  when  full  freedom  of  movement  for  the  crewmember  is  desired, 
a)  Both  impact  sensitive  and  rate  sensitive  reels  are  used.  Rate  sensitive  reels  are  preferred 
by  Army  for  helicopters  and  light  Hxed  wing  aircraft  because  of  the  multidirectional 
possibilities  for  imr  <ct,  which  may  not  trigger  the  impact  sensitive  system,  b)  Sometimes, 
retractors  or  pow  :  haul-back  featiures  are  also  used.  When  used,  powered  haul-back 
mechanisms  are  us  -i  to  retract  slack  (e.g.,  for  seat  ejection).  However,  automated  haul-back 
for  crash  restraint  ihould  be  avoided,  since  the  time  lapse  between  triggering  and  haul-back 
will  result  in  an  anded  contribution  to  body  loads  (the  sum  of  crash  and  retractor  loads), 
c)  InflataKe  systexos  aci  much  faster  than  automated  haul-back  and  have  less  take  up 
capability;  thus  tlie  Army  will  consider  inflatable  systems  while  rejecting  automatic 
haul-back. 


TYPES  OF  RESTRAINT  SYSTEMS 

Representative  restraints  used  by  the  U.S.  Army  are  presented  in  figure  D-5.1  (a  through  e). 
Configuration  (a)  is  the  “minimum  acceptable”  U.S.  Army  system.  An  improved  lateral,  restraint 
system  is  illustrated  in  (b),  which  adds  more  shoulder  restraint  against  sideways  motion.  In  (c),  a 
crew  chief/gunner  restraint  system  provides  for  ability  to  move  out  of  the  seat  but  be  instantly 
restrained  when  he  returns.  Troop/pasaenger  systems  are  illustrated  in  (d).  An  automatically 
inflatable  system  is  illustrated  in  (e);  this  one  automatically  pretensions  to  force  the  occupant  back 
into  his'  seat  and  eliminates  potential  for  looseness  and  extended  dynamic  response, 
e.g.,  overshoot. 

RESTRAINT  ANCHORS 

Lap-Belt  Anchorage 

Lap-belt  anchors  may  be  on  the  seat  bucket  or  on  aircraft  structure.  Structural  mounting  must 
assure  that  the  restraint  remains  effective  regardless  of  seat  position.  Structural  attachment  will 
not  be  practical  when  the  seat  includes  longitudinal  load  limiting.  Lap-belt  anchor  location  is  also 
considered  a  comfort  factor;  locating  it  too  far  forward  interferes  with  movement  of  the  legs.  This 
is  considered  important  for, pilots  but  not  important  to  passengers  since  they  are  not  required  to 
perform  operations  with  their  legs. 

By  Army  practice,  submarining  is  considered  to  be  prevented  by  a  lapbelt  tie  down  strap,  by 
locating  the  belt  so  its  centerline  falls  2  to  2.25  in.  forward  of  the  seat  reference  point,  and/or  by 
assuring  that  the  angle  between  the  lap  belt  centerline  and  the  buttock  reference  line  is  at  leut 
45*  (but  not  exceeding  55*)  for  a  50th  percentile  occupant  (fig.  D-5.2).  The  45  to  55*  angle  has 
priority  over  the  2  to  2.25  in.  location  dimension.  Submarining  Cain  also  be  reduced  by  ensuring 
that  the  lap  belt  is  tight. 

COMMENT:  Data  on  which  these  conclusioiu  are  based  appear  to  be  twofold.  First,  from  practice,  it 
was  long  ago  presumed  that  the  belt  aliould  be  anchored  low  and  forward  enough  to  keep  it  on  the 
pelvis,  but  aft  far  enough  to  keep  the  occupant  from  sliding  forward  off  the  seat  —  with  45  to  55*  an 
obvious  solution  as  effecting  the  most  direct  compromise  between  the  two  (R.F.  Chandler,  SAFE 
Panel  Discussion  on  Attendant  Restraint  Improvement  Study,  December,  1979,  Las  Vegas). 
Another  basis  appears  to  have  been  selected  from  the  data  of  figure  D-5.3,  although  the  referenced 
sources  do  not  particularly  emphasize,  for  example,  that  some  dummies  are  predisposed  to 
submarine,  or  that  the  only  clear  source  of  harneiw  angle  data  (which  these  data  are  from)  is  baaed 
on  a  bandolier  type  shoulder  harness  (with  twisting  and  compression  confounded)  and  a  scat  with 
extremely  reclined  seat  back  and  seat  bottom.  Shoulder  harness  criteria  were  also  based  on  visual 
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Figure  0-5.3  -  Belt-Harness  Angles  From  Literature  Survey 


ob^rvation  of  slow  motion  film  with  no  physical  measurements  to  support  conclusions  regarding 
vertebrae  compression. 

Shoulder  Harness  Anchorage 

The  shoulder  harness  may  be  placed  either  on  the  seat  back  structure  or  on  the  basic  aircraft 
structure.  Strap  routing  must  avoid  the  possibility  of  interference  or  constraints  from  seat 
adjustnient  or  energy  absorbing  stroking.  Additionally,  the  relationship  of  the  harness  angle  to  an 
aft  horizontal  tangent  to  the  shoulder  should  be  minimally  effected  by  seat  adjustments.  The 
position  of  the  Army  Guide  is  that  the  aft,  horizontal  angle  of  the  harness  from  the  shoulder 
should  not  exceed  30®  up  from  the  perpendicular  to  the  seat  back,  and  the  intercept  with  the  seat 
back  should  not  be  lower  than  26  in.  above  the  buttock  reference  line  (Hgure  D-5.2).  Lateral 
movement  in  the  seat  back  guide  for  the  harness  should  be  restricted  to  0.5  in.  or  less. 

COMMENT:  For  lower  load  levels,  a  much  wider  range  of  angles  may  be  possible;  otherwise  use  of 
the  same  seats  by  men  and  women  would  require  two  harness  systems.  The  result  of  systematically 
varying  seat  belt  and  harness  angles  for  a  traditional  “4  anchor*  or  *4  point*  system  (with  a  9  G 
crash  pulse)  is  illustrated  in  figure  D-5.4,  based  on  the  TARC  216-10  (ref.  D-3)  application  of  the 
highly  calibrated  PROMETHEUS  III  model.  Selected  combinations  showed  submarining  could  be 
controlled  over  a  wider  range  than  had  been  presumed  as  indicated  by  belt  slip  and  pelvis  rotation 
for  incipient  submarining  (2  in.  and  27®,  respectively,  in  the  model).  Additionally,  there  was  no 
marked  influence  on  estimates  of  lumbar  compression  loads  within  the  range  of  +40®  for  harness 
angles  and  25®/30®  to  70®  for  belt  angle  (with  broader  ranges  apparently  feasible  in  some  special 
combinations).  (Such  data  were  for  a  horizontal  seat  pan  and  a  vertical  seat  back.) 

The  TARC  study  also  indicated  that  seat  configuration  (i.e.,  pan  angle  and  back  angle)  influences 
restraint  system  performance.  Figure  0-5.5  illustrates  the  variation  in  performance  with  a 
‘^4-anchor”  system  as  the  seat  pan  and  back  angles  are  systematically  altered  through  a  range 
of  settings. 

The  TARC  study  also  showed  that  changing  restraint  system  design  can  have  a  marked  influence 
on  restraint  system  effectiveness.  Figure  D-5.6  illustrates,  the  change  in  retention  performance 
with  different  restraint  systems  configurations.  As  illustrated,  alternative  configurations  can 
provide  marked  retention  improvements  with  no  change  in  anchorage  and  no  significant  penalties. 

Lap-Belt  Tiedown  (Crotch)  Strap  Anchorage 

This  strap  is  to  prevent  ride-up  of  the  belt  when  used.  It  should  intercept  the  seat  pan  centerline 
14  to  15  in.  forward  of  the  seat  back. 

ADJUSTMENT  HARDWARE 

Adjusters  are  to  carry  the  full  design  load  of  the  subassembly  of  which  they  are  part,  without 
slipping  or  crushing  webbing.  Required  adjustment  force  should  not  exceed  30  lb  Adjusters  are 
not  to  be  located  over  skeletal  hard  points  (iliac  crest  of  pelvis,  collar  bones). 

DELETHAUZATION  OF  COCKPIT  AND  CABIN  INTERIORS 

The  main  purpose  of  *delethalization*  is  to  minimize  potential  for  injuries  that  jeopardize 
emergency  evacuation.  The  kinematics  of  body  action  associated  with  aircraR  crash  impacts  can  be 
violent  including  flailing  of  body  parts.  The  Army  position  is  that  this  is  severe  with  only  a  lap 
belt  as  the  restraint,  but  multidirectional  flailing  is  still  extensive  with  a  lap-beltishoulder 
harness  combination. 
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Figure  D-S. 4  -  Submarining  and  Lumber  Compression  Tendencies  With  Interacting 
Belt-Versus  -  Harness  Angles 
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I  REFERENCE  FOR  RESTRAINT  ANGLES 


Z 

g 

< 

I- 

o 

(T 

S2 

> 

-i 

UJ 

Q. 


CO 

CO 

S  ut 
a:> 
5:i- 
O  < 


o 

(T 

< 

CQ 

S 

O 


UJ 

cc 


Figure  0-5.5  -  Submarining  and  Lumber  Compression  Tendencies  With  Seat-Versus-Back 
Angles 


CONFIGURATIONS  submarine/  head/chest  webbing  seat  pan 

LUMBAR  ACCELERATION  LOAD  LOADS 


COV.MENT:  i  !?  re  is  little  evidence  that  such  dramatic  multidimensional  and  injurious  flailing  of 
the  limbs  occurs  in  large  commercial  airplanes.  Reports  suggest  that  if  it  occurs  most  such  action 
appears  to  be  allied  with  the  primary  impact  loading  in  the  fore-and-aft  direction,  since  there  is 
little  cartwheeL’ng  or  large  lateral  acceleration  evidenced  in  large  aircraft  impact. 

The  occupants’  immediate  environment  should  be  designed  so  that  injury  potential  is  minimized  if  the 
body  parts  flail  and  contact  rigid  or  semirigid  structures  in  the  immediate  environment.  Alternatives 
are  to  move  the  hazardous  object  (or  structure)  out  of  the  flail  zone,  mount  it  on  frangible  or  energy 
adsorbing  supports  and/or  apply  a  padding  material  to  distribute  contact  force  over  a  larger  area  on 
the  body  member. 


ENERGY  ABSORPTION 

Energy  absorbing  devices  are  introduced  with  the  statement  that  the  seat  structure  must  po^ss 
either  the  capability  of  sustaining  the  maximum  inertial  forces  imposed  by  the  deceleration  of  the 
occupant  and  seat,  without  coUapsingfi.e.,  deforming  or  failing),  or  have  sufficient  energy  absorption 
capacity  to  reduce  the  occupant’s  velocity  to  zero  before  structural  failure  occurs.  The  first 
alternative  could  involve  excessive  strength  (and  weight)  requirements  to  accommodate  dynarric 
overshoot  factors  of  1.2  to  2.0  (i.e.,  load  factors  to  twice  as  large  as  design  loads).  The  second 
using  controlled  collapsing  behaviors  offers  a  more  practical  approach.  It  does  offer  the  capability  to 
better  control  force  levels  relative  to  human  tolerances.  Of  course,  neither  approach  is  totally 
achievable. 

COMMENT;  Ultimately,  design  for  any  approach  will  be  exceeded;  there  is  no  way  to  assure  ultimate 
survivability.  Even  the  selection  of  a  95th  percentile  crash  was  based  on  recognition  of  this  fact. 
Nevertheless,  wording  frequently  overlooks  this  fact. 

CRASH  ENERGY  ABSORPTION 

During  crash  loads,  the  occupant’s  center  of  gravity  acquires  a  distinct  velocity  relative  to  the 
airframe.  Maximum  relative  velocity  may  become  large.  In  turn,  the  seat  must  sustain  the  applied 
loads  or  possess  sufficient  energy  abscirpticn  capability  to  reduce  the  occupant’s  relative  velocity 
before  structural  failure  occurs.  The  Guide  emphasizes  the  desire  to  obtain  the  greatest  energy 
absorbing  stroke  from  tbe  seat  (for  Army  conditions  with  widely  varied  impact  loads).  This 
receives  independent  emphasis  without  regard  to  energy  absorption  from  other  system  elements. 
Increasing  occupant  stopping  distance  dur a  crash  can,  reduce  impact  loads  and  thus  improve 
tolerability  levels  for  imposed  decelerations.  Methods  include: 

1.  Additional  crvshable  airframe  structure 

2.  Energy-absorbing  landing  gear 

3.  Seat  design  with  energy  absorbing  raechanismfs)  (e.g.,  load  limiting  or  controlled 
seat  collapse) 

4.  A  combination  of  the  above 

Common  misconceptions  exist;  related  comments  are: 

1.  The  seat  energy-absorbing  system  doCs  not  absorb  all  the  energy  associated  with  the 
impact  velocity. 


i  The  first  comment  also  explains  why  alack  in  the  restraint  ^stem  or  seat  attachments  is 
undesirable;  added  stroking  to  accommodate  larger  relative  velocity  will  be  required  to 
Jrcelerate  the  occupant. 

3.  T  .e  s  i  energy  absorbing  stroke  simply  lengthens  the  stopping  distance  of  the  occupant  by 
showing  the  seat  to  stroke  as  other  energy  absorbing  processes  are  nearing  completion. 

4.  Disregarding  dynamic  response  differences,  the  same  stroke  distance  is  required  to 
decelerate  any  mass  at  a  given  deceleration  magnitude.  Therefore,  lighter  people  do  not 
require  shorter  strokes  than  heavier  people  (however,  a  different  energy  absorption 
characteristic  is  required). 

COMMENT:  Stroking  must  occur  in  such  a  way  as  to  minimize  the  possibility  of  entrapment. 

ENEUGY  ABSORBING  REQUIREMENTS  FOR  COCKPIT  AND  CABIN  INTERIORS 

Two  categories  of  head  impact  injury  are  of  primary  concern— skull  fracture  with  potential  brain 
damage,  and  facial  tissue  and  bone  structure  injury  with  leaser  probability  of  brain  damage. 
Penetration  by  protruding  ol^ects  is  also  of  concern.  Trauma  from  intercranial  lesions  is  mentioned, 
but  without  criteria  other  than  to  reduce  level  of  acceleration,  rate  of  onset  and  amount  of  energy 
tiansnlitted  to  the  head. 

The  Army  position  is  that  *acceleratioa  experiraced  during  secondary  impacts  of  the  occupant 
with  the  surrounding  structures  must  be  reduced  to  a  tolerable  level.”  Padding  material  should 
both  reduce  the  decelerativs  force  and  distribute  the  load  for  uniform  pressure.  Candidate  for 
energy  absorbing  include  instrument  panels,  glareshieids,  other  interior  surfaces  within  the  strike 
zone,  and  seat  cushions. 

Empirical  System  Response  —  Theoretical  and  empirical  information  is  presented  on  dynamic 
energy  absorbing  response,  on  empirical  development  of  crashworthy  armored  seats,  and  on  load 
limit  devices.  Extensive  discussion  is  not  warranted  for  this  abstracting  summary.  (A  much 
simpler  caiculation  method  based  on  hsndbook  dsta  is  piesented  in  the  appendix  D-A  to  this 
present  report) 

ENERGY  ABSORBING  DEVICES 

As  summarized  for  the  Guide,  s  multitude  of  devices  for  absorbing  energy  have  been  proposed, 
developed  and  tested.  Desirable  features  of  such  devices  are:  . 

1.  The  device  should  provide  a  predictaUs,  force-veraus-deformation  trace. 

2.  The  rapid  loading  ra  te  expected  in  crashes  should  not  cause  unexpected  changes  in  the  force* 
versus<deformatioa  characteristic  of  the  device. 

3.  The  assembly  in  which  the  device  is  used  should  have  the  ability  to  sustain  tension  and 
compression.  (This  might  be  pro\ided  by  one  or  more  energy  absorbers,  or  by  the  basic 
structure  itself,  depending  on  the  system  design). 

4.  The  device  should  be  as  light  and  small  as  poaeible. 

5.  Ttie  Specific  Energy  Absorption  (SEA)  should  be  high. 


6.  The  device  should  be  economical. 

7.  The  device  should  be  capable  of  being  relied  upon  to  perform  satisfactorily  throughout  the 
life  of  the  aircraft  (for  Army,  a  minunum  of  10  years  or  8000  flight  hours)  without  requiring 
maintenance. 

8.  The  device  should  not  be  affected  by  vibration,  dust,  dirt,  or  other  environment  effects.  It 
should  be  protected  from  corroaion. 

9.  The  device(s)  should  decelerate  the  occupant  in  the  moat  efficient  manner  possible  while 
maintaining  the  loading  environment  within  the  limits  of  human  tolerance. 

Numerous  load  limiters  have  been  devised.  The  concepts  are  illustrated  and  described  in  figure 
D-5.?.  Body  decelerations  tend  to  normalize  near  the  G  level  corresponding  to  the  limit  load  factor  of 
the  energy  absorbing  device.  An  optimum  device  cannot  be  selected  for  all  applications  on  the  basis 
of  available  data.  Rather,  the  data  of  the  figure  presents  concepts  and  guidelines  which  can  be 
considered  relative  to  specific  applications. 

SEAT  STRENGTH  AND  DEFORMATION  DESIGN  REQUIREMENTS 

Design  should  be  baaed  on  typical  weight  of  the  occupant,  not  the  extreme  weight.  The  restrictions 
placed  on  crew  seats,  including  stroke  length,  control  access,  and  seat  armor  limit  flexibility  of 
design  options.  The  weight  of  combat  gear  is  not  included  in  Guide  recommendations  for  crew 
seats.  Since  the  large  majority  of  flight  hours  are  not  in  combat,  it  is  probable  that  flight  crew 
members  will  also  be  lightly  equipped.  This  minimizes  another  problem.  If  the  full  range  of 
weights  were  to  be  accommodated,  a  weight  sensitive  energy  absorbing  system  would  become 
mandatory  in  order  to  protect  the  occupants  over  the  full  range  of  weiehts. 

Occupant  weights  determining  the  effective  design  loads  for  seats  recommended  design  loads  are 
based  on  5th  through  95th  percentile  weights  tor  men.  i.e.,  144  through  222  lb.  for  crewmera,  with 
112.6  to  175.2  lb.  vertical  effective  weight  (effective  weight  reduces  seat  load  conaiderationa  by 
the  amount  of  the  occupant's  legs,  which  rest  on  the  floor.  As  (he  authors  point  out,  the  ideal 
situation  would  be  to  permit  energy  abaorbmg  stroke  length  for  the  95th  percentile  occupant  using 
deceleration  limits  baaed  on  the  5th  percentile  (who  would  load  the  system  leas  and  require  more 
yielding  ductility,  i.e.,  a  lower  yield,  for  the  same  load  reduction  capability).  However,  as  they  also 
point  out.  comnromises  must  be  made  since  the  resulting  needed  stroke  distance  will  not  be 
available  in  aircraft.  A  greater  weight  vahatioo  exists  for  tmops  and  seats  should  be  designed  to 
accommodate  them.  The  95th  percentile ,  should  be  considered  heavily  clothed  and  the  5th 
percentile  lightly  clothed. 

COMMENT:  A  wide  vsriatioa  in  occupant  weight  cannot  be  avoided  in  the  commercial  environment. 
Strength 

The  Guide  authors  consider  that  *an  elastic  streas  analysis,  as  used  in  the  design  of  airframe  and 
aircraft  components  subjected  to  normal  flight  loads,  is  inadequate  for  the  study  of  all  the 
structure  in  a  crash  situation  ...  the  load  carrying  capacity  of  components  deformed  beyond  the 
elastic  limit  should  be  considered  in  determining  the  ultimate  seat  strength." 

StrengUi  and  Defonnation 

In  discussing  this  subject.  Guide  authors  fust  point  out  that  some  stroking  (or  displacement)  will 


occur  for  all  systems  if  they  are  to  remein  in  place  during  deceleration  loads.  A  minimum 
displacement  must  be  achieved  if  the  system  u  to  remain  in  place  during  a  given  acceleration 
pulse.  In  other  words,  there  is  an  inherent  load  deflection  curve  and  travel  limit  envelope  which 
imposes  definite  limits  on  the  ability  of  any  system  to  resist  impulse  loading.  Intentional  load 
limiting  is  thus  the  control  of  this  deflection  to  make  best  use  of  the  space  available  in  order  to 
absorb  energy  and  to  optimize  the  occupant’s  capability  to  survive  the  loads  imposed.  Additionally, 
structural  joint  deformation  should  be  capable  of  large  angular  distortions  in  all  directions  without 
failure,  (e  g.,  bending  moment  between  leg  and  sitting)  including  floor  distortion  and  seat 
pan  distortion. 

PADDING  MATERIALS  AND  PROPERTIES 

Plastic  foams  are  considered  by  Army  Guide  authors  as  the  most  useful  type  of  materials  for  energy 
absorbing  padding.  Both  slab  and  molded  foams  are  practical,  and  they  are  considered  by  Guide 
authors  to  permit  selection  evaluation  based  on  processability;  mechanical,  thermal  and  chemical 
properties;  and  coat.  Characteristics  of  “suitable  materiala”  include  the  following;  representative 
uses  are  identified  in  figure  0-5.8. 

1.  Adaptability  and  ease  of  processing 

2.  Nontoxic  fume  generation 

3.  Favorable  flammability  rating 

4.  Minimal  smoke  generation 

5.  Durability  and  long  life 

6.  (k)8t  competitive 

7.  Aesthetic 

8.  High  energy  dissipation 

9.  Effective  load  distribution 

10.  Low  rebound 

11..  Temperature  insensitivity 

12.  Low  water  absorption 

13.  Resistance  to  chemicals,  oil,  ultraviolet  radiation,  and  sunlight 
Additionally,  relevant  mechanical  properties  include: 

1.  Density  ,5  Compressive  modulus 

2.  Tensile  strength  6.  Flexural  strength 

3.  Tensile  modulus  7.  Flexural  modulus 

4.  Compressive  strength 


1 .  Semirigid  and  flexible  urethane  foam 

Aircraft,  automobile,  and  furniture  seat  cushions, 
safety  padding,  am  rests,  sun  visors,  horn  but¬ 
tons,  bedding,  carpet  underlay,  packaging  delicate 
products. 


2.  Polyvinylchloride  foam 

Clash  padding  in  automobile  head  liners  and  sun 
visors,  flooring,  shoe  soles  and  heels,  automo¬ 
bile  4oor  panels,  seating  upholstery  sealants, 
gaskets,  bumperstock. 


3.  Polystyrene  foam 

Insulation,  packaging. 


4.  Expanded  rubber 

Bus  and  subway  seat  cushions,  truck  and  ship 
mattresses,  gaskets,  hose  insulation. 


S.  Polyester  foam 

Short-run,  custom- type  seat  cushioning. 


6.  Polyolefin  foam 

Packaging,  gasketing,  watOr  sports  equipment,  rug 
underlay,  athletic  padding,  antivibration  padding. 
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Figure  0-5.8  -  Bnwgy  Absorbing  Plasbc  Foams  and  Soma  Typical  Applications 


8. 

Tear  strength 

12.  Rebound 

9 

Compression  set 

111.  Hardness 

10. 

Compression  deflection 

14.  Impact 

11. 

Elongation 

APPUCATION  OF  PADDING  MATERIAL  AND  DUI'TILE  MATERIALS 

“In  the  absence  of  data  for  extremity  impacts,  it  is  assumed  that  padding  material  that  is  suitable 
for  head  impact  protection  is  also  suitable  for  protecting  extremities."  Strike  zone  areas  with  radii 
of  “2  inches  nr  leas”  should  be  padded  to  a  “minimum  thickness  of  0.75  inches’ 

Ductile  energy  absorbing  matenals  and  breakaway  panels  should  be  used  where  possible. 
Swearingen  (ref.  D-9)  is  cited  as  demonstrating  “that  at  impact  velocities  of  ‘iOft/sec  against  ngid 
structure  padded  with  materials  even  6  in.  thick,  unconsciousness,  concussion,  and/or  fatal  head 
injuries  will  be  produced.  The  Guide  continues,  “where  possible,  deformable  structure  and  padding 
material  should  be  considered  to  absorb  the  impact  energy  and  to  adequately  distribute  the  forces 
over  the  face"  (fig  D-5.9). 

COMMENT:  Effectivenesa  of  padding  has  been  accepted  as  being  adequate  for  lesser  thicknesses 
in  commercial  aircraft,  which  also  have  lower  G  criteria.  There  is  also  a  question  as  to  whether  the 
same  level  of  protection  is  needed  for  the  extremities.  From  earlier  Swearingen  work,  it  was 
concluded  that  covering  a  head  impact  surface  with  1  in.  of  Koreseal,  (since  superseded  by  Enaolite 
AH.  or  equivalent),  would  be  considered  to  provide  for  delethalization. 

SEAT  CUSHIONS 

Seat  Cushions  —  General  Requirementa 

Seat  cushions  should  preclude  body  contact  with  seat  structure  while  being  light,  tough  (wear 
resistant),  easily  replaced,  comfortable,  and  ventilated  end  provide  nc:at]on,  while  minimizing 
motion  during  crash  loading  and  rebound  after  crash  loading.  For  Army  purposes,  load  limiting 
cushions  were  considered  to  be  undesirable.  Net-type  cushions  are  usable  if  designed  to  limit 
maximum  deformation  and  return  movement,  and  to  control  potential  for  submarining  or  dynamic 
overshoot.  Furniture  type  back  cushions  are  acceptable;  finally,  a  head  rest  should  be  provided  to 
provide  whiplash  protection. 

Direct  contact  surfaces  of  the  seat  bottom  and  seat  back  “should  be  designed  for  comfort  and 
durability."  However,  “sufficient  cushion  thickness  of  the  appropriate  material  stiffness  should  be 
provided  to  preclude  body  contact  with  the  seat  structure  when  siibjected  to  either  the  specified 
operational  or  crash  loads.  ...  The  conflicting  requirements  of  long-term  comfort-versus^raah 
safety  considerations  have  made  this  a  difficult  design  area.” 

From  comfort  emphasis  in  the  past,  thick,  soft  cushions  were  uaed,  spreading  the  load  to  avoid 
buttock  pressure  points.  Holes  or  forced  air  flow  (or  net  cushions)  provided  for  cooling. 

COMMENT:  However,  the  softness  of  such  cushions  permits  a  velocity  build-up  aa  the  soft 
material  compresses  farther.  Build-up  is  rapid  during  initial  loading  then  followed  by  a  shorter 
stopping  distance  during  the  final  stages  of  high  deceleration  loading  —  for  a  nonlinear  stopping 
characteristic  that  puts  major  decelerations  over  a  much  shorter  distance.  In  order  to  minimize 


such  initial  motion,  crash  safety  considerations  require  a  minimal  thickness  of  soft  foam.  One 
approach  uses  a  cushion  base  contour  of  a  "‘universal”  buttock  configuration  with  foam  layer(s) 
added.  Rate-sensitive  (conforming,  but  hard  to  sudden  impact)  foam  can  be  used  on  top  of  the  base 
to  soften  contact  somewhat.  For  example,  a  thin  layer  of  soft  foam  may  be  used  on  top  for  comfort 
matenal  and  permit  cooling  air  motion. 

According  to  the  Guide,  seats  of  light  movable  weight  (less  than  30  lb.)  should  use  cushions  for 
comfort  only.  Maximum  uncompressed  thickness  should  be  1.5  in.  unless  ctishion  design  and 
material  properties  produce  a  beneficial  result  in  reduced  transmission  of  force.  By  Army  criteria, 
the  optimum  seat  cushion  will: 

1.  Be  extremely  light  weight 

2.  Possess  flotation  capabilities 

3. '  Be  nonflammable 

4.  Be  nontoxic;  will  not  give  off  fumes  when  burned,  charred,  or  melted 
5  Be  tough  and  wear  resistant 

6.  Be  easily  changeable 

7.  Provide  comfort  by  distributing  the  load  and  reducing  or  eliminating  load  concentrations 

8.  Provide  thermal  comfort  through  ventilation 

9.  Provide  little  or  no  rebound  under  crash  loading 

10.  Allow  an  absolute  minimum  of  motion  during  crash  loading 
Energy  Absorbing  Cushions 

Cushioning  materials  used  to  absorb  energy  include  foams,  honeycomb,  and  net-type  cushions.  “In 
most  cases,  the  back  cushions  will  not  play  a  significant  role  in  crash  dynamics;  however,  it  will 
itifluence  comfort  and  can  influence  the  injury  tolerance  of  the  spine.”  Lumbar  supports  are 
(..csirable;  a  lumbar  support  that  holds  the  lumbar  spine  forward  slightly  increases  tolerance  to 
vertical  spinal  loads. 

However,  use  c  f  cushions  per  se  as  load  limitera  is  undesirable.  Resulting  downward  motion  of  the 
te  rso  will  produce  added  restraint  harness  alack  (when  it  is  desirable  to  minimize  same).  Also  ”a 
crushable  cushion  does  not  make  optimum  use  of  the  available  stroke  distance,”  since  crushing 
space  is  needed  and  cushions  can  be  only  75%  as  efficient  as  a  mechanical  load  limiter.  'They  ”are 
impractical  in  rotary  and  light  fixed-wing  aircraft  because  of  the  long  stroke  distance  required  to 
attenuate  the  liigh  vertical  loads”  required  by  Array  criteria. 

I'’!‘ADREST 

A  1 .5-in.  headiest  should  be  provided  for  occupant  head/neck  whiplash  protection  from  backward 
flexure  of  the  neck,  t^ushioning  can  be  provided  by  a  thin  pad  and  deformable  headrest  or  a  thicker 
cushion  on  a  n  on  rigid  headrest.”  Results  of  the  TAPC  study  (ref.  D-3)  indicated  that  a  less  thick 
headrest  would  be  desirable  to  accommodate  a  full  range  of  male  and  female  population. 


TEST 


Structural  Sutwystem  Teat  Requiremeats 

For  Army  systems,  both  static  and  dynamic  teats  of  prototypes  are  recommended,  including  testing 
of  seat  and  Utter  systems  as  complete  units.  Component  testing  is  to  be  used  wherever  possible. 
Subsequently,  tests  are  to  include  cushions  in  place,  seats  full  up  and  full  bat;k  (unless  a  more  critical 
position  exists)  and  normal  floor  buckling  and  warping  conditions  set  up  for  the  most  critical 
impedance  to  seat  stroking.  Seat  mounts  should  be  actual  aircraft  hardware.  Seat  deformation 
should  be  measured  as  near  the  seat  reference  point  as  is  possible.  Subsequently,  only  quality 
assurance  testing  is  necessary  unless  major  structural  changes  occur.  If  desired,  dynamic  tests  with 
loading  in  all  principal  directions  may  be  substituted  for  static  teats.  In  static  test,  both  unidirectional 
and  combined  loading  tests  should  be  used,  with  test  loads  applied  proportionately  through  a  body 
block  restrained  in  the  seat  by  the  restraint  system.  Multiple  tests  are  spedHed,  using  the  effective 
weight  of  the  95th  percentile  male  for  ail  but  the  downward  loading,  which  uses  the  effective  weight 
of  the  50th  percentile  male.  Multiple  occupancy  seats  should  be  fully  occupied  when  tested; 
additional  testa  should  be  accomplished  for  other  adverse  conditions  that  are  identified. 

The  authors’  discussion  of  static  versus  dynamic  testing  recommends  that  static  tests  be  used 
because  real  time  observation  is  possible,  structural  response  information  is  more  comparable,  to 
typically  used  static  analyses,  and  tests  are  more  economical.  However,  all  U.S.  Army  prototype 
seats  should  be  dynamically  tested  for  two  conditions,  (1)  downward  at  a  30°  forward  am} 
sideward  tilt  and,  (2)  forward  at  a  30°  side  facing  angle. 

To  reduce  costs,  special  dynamic  test  conditions  are  permitted  for  seats  having  less  than  a  12-in. 
stroke.  First,  the  costly  full-scale  crash  teat  is  considered  desirable.  However,  and  secondly, 
alternative  dynamic  testing  of  the  seat  only  with  a  two  stage  pulse  is  acceptable,  naing  a  smaller 
initial  G  plateau  representing  failure  of  the  gear  and  increasing  to  a  later  higher  G  plateau 
representing  fuselage  crushing.  (Landing  gear  data  to  be  based  on  results  from  drop  test;  fuselage 
pnqwrties  are  to  be  determined  by  the  most  comprehensive  and  rigorous  analytical  techniques, 
supported  by  test  data). 

Personnel  Restrsdnt  Harness  Testinf 

Army  requiremeats  include  static  and  dynamic  test  of  restraints  along  with  the  structure  to  which 
atta<hed.  Additionally,  all  components  (webbing,  tiedoams  and  hardware  in  the  load  path)  as  well 
as  subassemblies  should  be  statically  tested  separately  to  verify  strength  and  elongation. 

Head  Impact  Test  Procedures 

Head  impact  test  procedures  are  moot  often  to  use  a  head  form  equipped  with  an  accelerometer 
and  to  propel  to  impact  with  the  surface  to  be  evaluated  via  controlled  drop,  swing  (pendulun^  or 
ram. 

Standard  Test  Methods  for  Energy  Absorbing  Foams 

Among  tests  used  from  ASTM  D 1564-71  (Standard  Methods  of  Testing  Flexible  Cellular  Materials 
—  Slab  Urethane  Foam)  are  both  load  deflection  and  compression  set  Numerous  tests  for  various 
possible  applications  are  defined.  For  ‘reasonable  survival  potential  for  head  impacts  as  velocities 
up  to  20  ft/sec  arith  a  paddihg  thickness  between  1.6  and  2.0  in.  ...‘acceleration  of  the  head  should 
not  exceed  60  G  and  sufficient  material  must  be  crushed  to  reduce  the  head  velocity  from 
20  ft^sec  to  0  ft/*ec  in  the  process  of  absorbing  the  head  kinetic  energy  of  approximately 
60to90fMb.’ 


Evaluation  criteria  for  load  distributing  applications  involves  the  assumptions  that  ‘A  load 
distributing  pad  should  permit  the  face  to  penetrate  the  surface  easily,  then  maintain  a  cushioning 
layer  of  foam  between  the  base  and  the  underlying  structure  during  collapse  of  the 
understructure.”  In  terms  of  energy  absorbing  efficiency,  Rusch  (ref  D-10)  b  cited  as  stating; 

1.  ‘Energy  absorbing  characteristics  of  a  brittle  foam  are  superior  to  those  of  a  ductile  foam, 

2.  The  optimum  energy  absorbing  foam  has  a  large  cell  size,  a  narrow  cell  size  distribution,  and 
minimum  number  of  reinforcing  membranes  between  the  cells;  and 

3.  ‘Foam  composites  offer  no  significant  advantage  over  a  single  foam.” 


APPENDIX  D-A 


Two  topics  related  to  crash  pulses  are  discussed  herein.  The  discussion  turns  on  the  relationship 
s  =  vT* ,  where  v  is  the  velocity  content  of  the  pulse  (the  pulse  is  assumed  to  stop  an  object  with  initial 
velocity  v),  T*  is  the  time  coordinate  of  the  centroid  of  the  pulse,  and  s  is  the  stopping  distance.  The 
above  formula  is  convenient  to  apply  since  the  centroids  of  stanckrd  pulse  shapes  (e.g.,  triangles, 
trapezoids,  sinusoids)  are  tabulated  in  engineering  handbooks.  The  relationship  reduces  the 
problem  of  solving  the  differential  equations  of  motion  to  the  simpler  geometric  problem  of  computing 
T*. 

The  topics  are:  discussion  of  errors  in  the  estimation  a  -  v^/2b,  where  a  is  the  average  pulse 
acceleration  and  v  and  s  are  as  defined  above;  and  a  simplified  method  for  computing  energy 
absorber  stroke  requirements. 

Before  discussing  the  topics  of  interest  the  relationship  s  -  vT*  will  be  derived. 

Derivation  of  s  »  vT* 

Let  s(t),  x(t)  and  x(t)  denote  the  position,  velocity  and  acceleration  of  the  vehicle  as  functions  of  time. 
Assume  that  an  acceleration  pulse  x(t)  of  duration  T  is  given.  Further, 

x(0)  =  G,  x(T)  =  s,  x{0)  =  V,  x(T)  *  0. 

(i.e.,  the  vehicle  crashes  with  initial  velocity  v,  coming  to  rest  in  time  T  and  distance  s). 

We  can  write  from  basic  definitioru: 


x'(t)  =  V  t  r  V(T)dT 
•'o 

Jt  -t’^^ 

(y*l  V(r)  dr^dt' 


o  o 


From  equation  (1), 


x(T)»0*v+J  *x(t  )dr, 

rt 


T .. 

x(r)  dr  • 


Integration  of  equation  (2)  by  parts  and  imposition  of  the  requirement  that  x(T)  «  a  gives 


x(T)  •  I ■ 


-f  tx(t)dt 


Now  define  T*  as  the  time  coordinate  of  the  centroid  of  the  area  under  the  deceleration  curve  —  that 
is. 


t  x(t)  dt 


.)/(/' Vo,.) 


(5) 


Substitution  of  equations  (3)  and  (4)  into  equation  (5)  gives 


=  (-s)/(-v)  =  s/v,  Q.E.D. 

Errors  in  the  estimation  formula  a  «  v^/28 

If  the  crash  impact  velocity  v  and  stopping  distance  s  can  be  determined^  the  Guide  recommends 
the  following  formula  for  estimating  the  ai'erage  crash  deceleration  a; 

a  =  -v2/2s  (6) 

If  the  crash  pulse  is  in  actuality  skewed  so  that  the  majority  of  the  acceleration  occurs  early  in  the 
crash,  equation  (6)  overestimates  the  magnitude  of  a.  To  see  why  this  is  so,  consider  two  aircraft 
crashes  represented  by  the  two  triangular  deceleration  pulses  shown  in  figure  D-A.l.  The  pulses 
have  the  same  average  deceleration  (v/T)  as  well  as  equal  duration,  equal  magnitude,  and  equal  area 
(the  area  represents  the  impact  velocity  v).  The  aircraft  in  the  first  crash  will  stop  in  a  shorter  distance 
(s)  than  the  aircraft  in  the  second,  because  the  deceleration  is  applied  more  quickly.  Thus, 
equation  (1)  would  incorrectly  predict  a  larger  average  deceleration  for  the  flrst  crash  than  for 
the  second. 

The  correct  relationship  requires  knowledge  of  the  pulse  shape.  To  derive  the  relationship,  first 
note  that  the  true  average  acceleration  a  is  given  by 


a  =  -v/T,  (7) 

where  T  is  the  pulse  diuation.  - 

The  relationship 

vT*/s  »  1 

was  derived  in  the  preceding  section.  Thus 


a=‘-(v/T)(l)*(v/T)(vT*/s). 


which  can  be  rearranged  to  read 


a  =  -  T*/(T/2)  (V-/2S). 


The  implication  is  that  when  the  deceleration  pulse  is  shaped  so  that  the  majority  of  the  deceleration 
occurs  in  the  first  half  of  the  pulse,  i.e.,  T*  <  T/2,  equation  (6)  overestimates  the  average 
deceleration  a,  while  if  most  of  the  deceleration  occurs  in  the  second  half,  i.e.,  T*  >  T/2,  then 
equation  (6)  underestimates  a.  Equation  (6)  is  accurate  only  when  the  centroid  T*  occurs  in  mid¬ 
pulse  —  that  is,  when  T*  =  T/2.  Figure  D-A.2  illustrates  equation  (8). 

Equation  (8)  can  be  used  to  bounu  uic  error  in  equation  (6).  For  example,  the  centroid  of  a 
trapezoidal  pulse  of  duration  T  mus*  fall  between  (1/3)T  and  (2/3)T.  Equation  (8)  shows  that  the 
maximum  error  inherent  in  equaticn  (6)  for  a  triangular  or  trapezoidal  pulse  is  33%,  that  is, 


2/3(v-/2s)  fa  f  4/3(v-/2s). 


Estimating  Energy  Absorber  Stroke  Requirements 

The  function  of  an  energy  absorber  is  to  reduce  the  peak  loads  experienced  by  a  passenger.  As  a 
result  of  energy  absorber  performance,  the  crash  pulse  experienced  by  the  passenger  has  a 
different  shape  than,  the  pulse  at  the  floor.  The  difference  in  pulse  shape  causes  a  differential  in 
stopping  distance  between  the  passenger  end  floor,  which  is  achieved  by  deformation  of  the  energy 
absorber  and  is  termed  the  energy  absorber  stroke. 

The  energy  absorber  may  be  regarded  as  a  filter  which  modifies  the  shape  of  the  deceleration 
pulse.  The  3th)ke  distance  can  be  related  to  this  Altering  action  in  a  simple,  geometric  way. 

The  stopping  distance  s  is  related  to  the  pulse  shape  by  the  formula 


s  “  vT* 

where  v  is  the  velocity  at  impact  and  T*  is  the  time  coordinate  of  the  centroui  of  the  d>K»leration 
pulse.  The  energy  absorber  stroke  requirement  is 


stroke  »  $2  “  Sj  »  v{T2*-  Tj  •)  (9) 


^here  the  subscripts  1  and  2  refer  respectively  to  the  floor  and  passenger.  The  required  stroke  is 
the  initial  velocity  multiplied  by  the  center  of  gravity  shift  caused  by  modifleation  of  the  shape  of  the 
deceleration  pulw. 


Equation  (9)  gives  an  intuitive  view  of  energy  absorber  performance.  For  example,  equation  (9)  can 
be  applied  to  compute  the  stroke  distan<ie  required  by  a  simple  load  limiter  under  a  triangular 
pulse  (figure  D-A.3).  From  geometric  considerations. 

V  =  at 

vT,»  =  vt  =  at- 

vTt*  =  (2/3)kt(k-at/:)  ♦  (kt  +  T/2)  kaT  (IC) 

where  T  is  calculated  from 

V  =  at  =  k'at/2-*-kaT  (11) 

Equation  (1 1)  is  usjd  to  eliminate  T  from  equations  (10),  and  the  stroke  is  computed  by  subtracting 
equations  (10).  The  formula. 


stroke  =  vTt*  -  vT,*  =  at*(k^/24  ♦  k/2  +  l/2k  -  I).  (12) 


is  easily  obtained.  This  derivation  is  simpler  than  the  derivation  in  the  Guide  based  on  integration 
of  the  acceleration  pulses. 
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transport  aircraft.  As  part  of  this  p  ogram  parallel  studies  have  been  conducted  by  The 
Lockheed  California  Company.  The  Douglas  Aircraft  Company,  and  The  Boeing 
Commercial  Airplane  Company  to  review  the  accident  experience  of  commercial 
transport  aircraft,  assess  the  accident  performance  of  structural  components  and  the 
status  of  impact  resistance  technology,  and  recommend  areas  of  research  and 
development  for  that  10-year  plan.  This  report  gives  the  results  of  the  Boeing  study. 
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